D-Link DSR-500 - Page 90

Unified Services Router User Manual
88
 Local WAN IP address / FQDN: This field can be left blank if you are not using a
different FQDN or IP address than the one specified in the WAN port‘s
configuration.
3. Configure the Secure Connection Remote Accessibility fields to identify the remote
network:
 Remote LAN IP address: address of the LAN behind the peer gateway
 Remote LAN Subnet Mask: the subnet mask of the LAN behind the peer
 Note: The IP address range used on the remote LAN must be different from the IP
address range used on the local LAN.
4. Review the settings and click Connect to establish the tunnel.
The Wizard will create a Auto IPsec policy with the following default values for a
VPN Client or Gateway policy (these can be accessed from a link on the Wizard
page):
Parameter
Default value from Wizard
Exchange Mode
Aggressive (Client policy ) or Main (Gateway policy)
ID Type
FQDN
Local WAN ID
wan_local.com (only applies to Client policies)
Remote WAN ID
wan_remote.com (only applies to Client policies)
Encryption Algorithm
3DES
Authentication Algorithm
SHA-1
Authentication Method
Pre-shared Key
PFS Key-Group
DH-Group 2(1024 bit)
Life Time (Phase 1)
24 hours
Life Time (Phase 2)
8 hours
NETBIOS
Enabled (only applies to Gateway policies)
 The VPN Wizard is the recommended method to set up an Auto IPsec policy.
Once the Wizard creates the matching IKE and VPN policies required by the Auto
policy, one can modify the required fields through the edit link. Refer to the online
help for details.