D-Link DSR-Series User Manual 109
Section 7 - VPN
Field Description
Policy Name Enter a unique name for the VPN Policy. This name is not an identiīer for the remote WAN/client.
Policy Type
Select either Manual or Auto.
⢠Manual: All settings (including the keys) for the VPN tunnel are manually input for each end point. No
third-party server or organization is involved.
⢠Auto: Some parameters for the VPN tunnel are generated automatically. This requires using the IKE
(Internet Key Exchange) protocol to perform negotiations between the two VPN Endpoints.
IP Protocol Version
Select either IPv4 or IPv6. The drop-down menu is based up on the IP Mode selected by the user on the
IP Mode page.
IKE Version Select the version of IKE.
L2TP Mode Select the L2TP mode.
IPSec Mode
Select either Tunnel or Transport. IPsec tunnel mode is useful for protecting traīc between diīerent
networks, when traīc must pass through an intermediate, untrusted network. Tunnel mode is primarily
used for interoperability with gateways, or end-systems that do not support L2TP/IPsec or PPTP
connections. Transport mode is the default mode for IPsec, and it is used for end-to-end communications
(for example, for communications between a client and a server).
Select Local Gateway
In the event that two WAN ports are conīgured to connect to your ISP, select the gateway that will be used
as the local endpoint for this IPsec tunnel.
Remote Endpoint
Select the type of identiīer that you want to provide for the router at the remote endpoint (either IP
Address or FQDN [Fully Qualiīed Domain Name])
IP Address/FQDN Enter the identiīer for the router.
Enable Mode Conīg
Toggle to ON to enable. Mode Conīg is similar to DHCP and is used to assign IP addresses to the remote
VPN clients.
Enable NetBIOS Toggle to ON to allow NetBIOS broadcasts to travel over the VPN tunnel
Enable RollOver Toggle to ON to enable VPN rollover. You must have the WAN Mode set to Rollover.
Protocol Select a protocol from the drop-down menu.
Enable DHCP
Toggle to ON to allow VPN clients that are connected to your router over IPsec to receive an assigned IP
using DHCP.