AirLive WN-300ARM-VPN - Manual (Page 97)

AirLive WN-300ARM-VPN User’s Manual 95
VPN Example - Connecting WN-300ARM-VPN and IP-2000VPN
Settings
Setting WN-300ARM-VPN IP-2000VPN Notes
Policy Name To_IP2K To_WN300 Name does not affect
operation. Select a
meaningful name.
Remote VPN
Endpoint
Fixed IP Address
60.250.158.64
PPPoE
DDNS enable
Other endpoint's WAN
(Internet) IP address.
NetBIOS Enable Enable Disable if not required.
Local LAN
IP address
Mask
192.168.0.0
255.255.255.0
192.168.1.0
255.255.255.0
Local Address subnet.
Use a more restrictive
definition if possible.
Remote LAN
IP address
Mask
192.168.1.0
255.255.255.0
192.168.0.0
255.255.255.0
Remote Address subnet.
Use a more restrictive
definition if possible.
IKE
Direction Initiator &
responder
Initiator &
responder
Does not have to match.
Either endpoint can block 1
direction.
Exchange mode Main Mode Main Mode Must match
DH Group Group 2 (1024 bit) Group 2 (1024 bit) Must match
Local Identity IP address IP address IP address is the most
common ID method
Remote Identity WAN IP address WAN IP address IP address is the most
common ID method
SA Parameters
Encryption 3DES 3DES Must match.
Authentication MD5 MD5 Must match
Pre-shared Key 12345678 12345678 Must match;
use any string.
SA Life time Default Default Does not have to match.
Shorter period will be used.
PFS Enable Group 2 If WN-300ARM-VPN sets to
enable, it will auto-detect the
other VPN device of PFS.