User Guide

NOTE: No matter on Main mode or Aggressive mode, once the client PC is behind a NAT

device, we have to select FQDN as ID Type and the NAT device must support VPN

passthrough, otherwise the VPN tunnel can’t be established.

Step 4: Under IKE Proposal 1, we select test in this example. Enter Pre-shared Key and SA

Lifetime you want, DPD is disabled. Click on Add.

Step 5: Click on IPsec on the left menu, then IPsec Proposal. Select Security Protocol, ESP

Authentication and ESP Encryption you want to enable on VPN tunnel. Here we

use ESP, MD5 and 3DES for example. Click on Add.