5G INDOOR ROUTER FG2000 USER GUIDE 37
Add New VPN Tunnel: Step 1 out of 5
General Settings
• Start tunnel — Select whether to start the tunnel automatically upon start up or manually.
• Enable tunnel —Check this box to enable the tunnel.
• Tunnel name — Enter a unique name to identify this VPN.
• Local identity — Enter a unique name to identify the local point of the tunnel.
• Remote identity — Enter a unique name to identify the remote point of the tunnel.
• Local authentication — Select an authentication type from the drop-down list. You will be
prompted for further information based on your selection.
• Remote authentication — Select an authentication type from the drop-down list. You will be
prompted for further information based on your selection.
Add New VPN Tunnel: Step 2 out of 5
Local Network
• Local IP — Enter the WAN IP address of local device. NOTE: This should be a static IP that you
are able to reach from remote device (no NAT).
• Local subnet mask — Enter the subnet mask of the local device, for example: If your local IP is
192.168.0.100 and your subnet mask is 255.255.255.0 this should be 192.168.0.0/24
. NOTE:
This should mirror what the subnet displays in the local device, for example: 192.168.0.0 /
255.255.255.0. NOTE: The local device should be on a different subnet from remote, for
example: If the Remote Subnet Mask is
192.168.1.0/24, the Local Subnet Mask might be
192.168.0.0/24. This is usually based off the DHCP settings of the devices.
Remote Network
• Remote IP — Enter the WAN IP address of remote device. NOTE: This should be a static IP that
you are able to reach from local device (no NAT).
• Remote subnet mask — Enter the subnet mask of the remote device, for example: If your
remote IP is 192.168.1.100 and your subnet mask is 255.255.255.0 this should be
192.168.1.0/24
. NOTE: This should mirror what the subnet displays in the local device, for
example: 192.168.1.0 / 255.255.255.0. NOTE: The remote device should be on a different subnet
from local, for example: If the Local Subnet Mask is
192.168.0.0/24, the Remote Subnet Mask
might be 192.168.1.0/24. This is usually based off the DHCP settings of the devices.