User's Manual

Virtual Private Networking
113
N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700
The DGND3700 VPN tunnel network connection fields are defined in the following table.
Table 19. VPN - Auto Policy screen settings
Fields and Settings Description
General Policy Name Enter a unique name. This name is not supplied to the remote VPN
endpoint. It is used only to help you manage the policies.
Remote VPN
Endp
oint
• The remote VPN endpoint has to have this VPN’s gateway address
entered as its remote VPN endpoint.
• If the remote endpoint has a dynamic IP address, select Dyn
amic IP
Address. No address data input is required. You can set up multiple
remote dynamic IP policies, but only one such policy can be enabled
at a time. Otherwise, select an option (IP address or domain name)
and enter the address of the remote VPN endpoint to which you want
to connect.
IKE Keep Alive • If you want to ensure that a connection
is kept open, or, if that is not
possible, that it is quickly reestablished when disconnected, select
this check box.
• The ping IP address has to be associated with the remote endpoint.
The
remote LAN address has to be used. This IP address will be
pinged periodically to generate traffic for the VPN tunnel. The remote
keep-alive IP address has to be covered by the remote LAN IP range
and has to correspond to a device that can respond to ping. The
range should be made as narrow as possible to meet this objective.
Local LAN
The remote VPN
end
point has to
have these IP
addresses entered
as its remote
addresses.
Subnet Mask The network mask.
Single/Start IP
Address
• Enter the IP address for a single address, or the starting address for
an
address range. A single address setting is used when you want to
make a single server on your LAN available to remote users. A range
must be an address range used on your LAN.
• Any. The remote VPN endpoint can be at any IP address.
F
inish IP Address For an address range, enter the finish IP a
ddress. This must be an
address range used on your LAN.
Remote LAN
The remote VPN
endp
oint has to
have these IP
addresses entered
as its local
addresses.
IP Address Single PC -
no
Subnet. Select this option if there is no LAN (only a
single PC) at the remote endpoint. If this option is selected, no
additional data is required. The typical application is a PC running the
VPN client at the remote end.
Single/Start IP
Address
• Enter an IP address that is on the remote LAN. You can use this
settin
g w
hen you want to access a server on the remote LAN.
• For a range of addresses, enter the
starting IP address. This has to
be an address range used on the remote LAN.
• Any. Any outgoing traffic from the computers in the Lo
cal IP fields
triggers an attempted VPN connection to the remote VPN endpoint.
Be sure you want this option before selecting it.
Finish IP Address Enter the finish IP address for a range of addresses. This has to be an
addre
ss range used on the remote LAN.
Subnet Mask Enter the network mask.