Draytek Vigor2762 series User Manual

in setting in the LAN-to-LAN Profile setup. This item is
optional and can be used only in IKE aggressive mode.
 Local Certificate – Select one of the profiles set in
Certificate Management>>Local Certificate.
IPsec Security Method - This group of fields is a must for
IPsec Tunnels and L2TP with IPsec Policy.
 Medium AH (Authentication Header) means data will
be authenticated, but not be encrypted. By default,
this option is active.
 High (ESP-Encapsulating Security Payload)- means
payload (data) will be encrypted and authenticated.
Select from below:
 DES without Authentication -Use DES encryption
algorithm and not apply any authentication scheme.
 DES with Authentication-Use DES encryption
algorithm and apply MD5 or SHA-1 authentication
algorithm.
 3DES without Authentication-Use triple DES
encryption algorithm and not apply any authentication
scheme.
 3DES with Authentication-Use triple DES encryption
algorithm and apply MD5 or SHA-1 authentication
algorithm.
 AES without Authentication-Use AES encryption
algorithm and not apply any authentication scheme.
 AES with Authentication-Use AES encryption
algorithm and apply MD5 or SHA-1 authentication
algorithm.
Advanced - Specify mode, proposal and key life of each IKE
phase, Gateway, etc.
The window of advance setup is shown as below:
IKE phase 1 mode -Select from Main mode and Aggressive
mode. The ultimate outcome is to exchange security
proposals to create a protected secure channel. Main mode
is more secure than Aggressive mode since more exchanges
are done in a secure channel to set up the IPsec session.
However, the Aggressive mode is faster. The default value
in Vigor router is Main mode.
 IKE phase 1 proposal-To propose the local available
authentication schemes and encryption algorithms to
the VPN peers, and get its feedback to find a match.
Two combinations are available for Aggressive mode
and nine for Main mode. We suggest you select the
combination that covers the most schemes.
 IKE phase 2 proposal-To propose the local available
algorithms to the VPN peers, and get its feedback to
find a match. Three combinations are available for
both modes. We suggest you select the combination
Vigor2762 Series User’s Guide
206

Draytek Vigor2762 series Specifications

General

Brand	Draytek
Model	Vigor2762 series
Category	Network Router
Language	English