User's Manual

Figure 4-7 IPsec Policy
Tips:
For the VPN router in the remote branch office, the IPsec settings should be consistent with the router
in the headquarters. The Remote Gateway of the remote router should be set to the IP address of the
router in the headquarters.
After the IPsec VPN tunnel of the two peers is established successfully, you can view the connection
information on the VPN→IPsec→IPsec SA page.
Figure 4-8 List of IPsec SA
4.3.2.2 PPTP VPN Setting
The VPN clients in the remote branch office can access the Internet via VPN server built with the
TP-LINK VPN router in the headquarters. It means that the VPN router acts as a proxy. If the IP
addresses in the IP Address Pool is in the same subnet with the VPN router’s LAN port, the remote
VPN clients can directly access the Internet. It’s recommended that the IP address range in the IP
Address Pool do not overlap with the one in the local DHCP IP address pool. If not in the same subnet,
-142-