Operation Manual

Virtual Private Networking
114
N300 Wireless ADSL2+ Modem Router DGN2200v4
4. Specify the Local LAN settings:
• From the IP Address list, select Subnet address, Single address, or Range
address.
• Fill in the Single/Start IP Address field.
• If you are specifying a range, fill in the Finish IP Address field.
This range must be an address range used on your LAN. For a single IP address, do
not fill in the Finish IP Address field.
The remote VPN endpoint must have these IP addresses entered as its remote
addresses.
5. Specify the Remote LAN settings.
• From the IP Address list, select Single PC -no Subnet, Single address, Range
address, or Subnet address.
If there is no LAN (only a single computer) at the remote endpoint, select the Single
PC -no Subnet option. The Single address option is typically used to access a server
on the remote LAN.
• If you want to specify a range, fill in the Finish IP Address field.
This range must be an address range used on the remote LAN.
• Fill in the Subnet Mask field.
The remote VPN endpoint must have these IP addresses entered as its local addresses.
6. Specify the IKE settings:
• From the Direction list, select either Responder only or Initiator and Responder.
The modem router uses this setting to determine if the IKE policy matches the current
traffic. With the Responder only setting, incoming connections are allowed and
outgoing connections are blocked. With the Initiator and Responder setting, both
incoming and outgoing connections are allowed.
• Ensure that the remote VPN endpoint is set to use Main Mode.
• Select the Diffie-Hellman (DH) Group from the list.
The Diffie-Hellman algorithm is used when keys are exchanged. The DH Group
setting determines the bit size used in the exchange. This value needs to match the
value used on the remote VPN gateway.
• Select the local identity type.
Select an option to match the Remote Identity Type setting on the remote VPN
endpoint.
- WAN IP Address. Your Internet IP address.
- Fully Qualified Domain Name. Your domain name.
- Fully Qualified User Name. Your name, email address, or other ID.
• Select the remote identity type.