Support Center Application Notes VPN Application Notes
 
  


If Vigor Router is configured as the VPN client, please follow the Setup below:

1. Common Settings:
   a. Type the Profile Name.
   b. Select "Enable this Profile".
   c. Select Dial-Out and set the Idle Timeout as 0 to retain this tunnel till terminated by the remote site.

If Always on is selected, please select "Enable PING to Keep alive and type the any remote network IP in the "PING to the IP" field, Vigor will try to reconnect if the tunnel is broken.

2. Dial-Out Settings:
   a. Enable the IPSec tunnel.
   b. Type the IP address or host name of VPN server.
   c. Type the IKE Pre-shared Key.
   d. Enable the IPSec Security Method.
   e. click the Advance button. Enable the "Aggressive mode" and type the Local ID (you may use IP address, email, or a string as Peer ID).

4. TCP/IP Network Settings:
   Fill in the Remote Network IP and Remote Network mask.





If Vigor Router is configured as VPN Server, please follow the Setup below:

1. Common Settings:
   a. Type the Profile Name.
   b. Select "Enable this Profile".
   c. Select Dial-In and set the Idle Timeout as 0 to retain this tunnel till terminated by the remote site.

3. Dial-in Settings:
   a. Enable the IPSec tunnel.
   b. Enable the Specify Remote VPN Gateway.
   c. Type the Peer ID(you may use IP address, email, or a string as Peer ID).
   d. Type the IKE Pre-shared Key.
   e. Enable the IPSec Security Method.

4. TCP/IP Network Settings:
   Type the Remote Network IP and Remote Network mask.



For Netscreen Setup:

1. Please click " Objects " -› " Address " -› " List " field on the left menu.
   Select " Trust " and click New to add Netscreen's LAN address.



2. Type the Address Name.
   Select and type the IP/Netmask.
   Click ok.



3. Select " Untrust " and click New to add Vigor's LAN address.



4. Type the Address Name.
   Select and type the IP/Netmask.
   Click ok.



5. Please click " VPN " -› " AutoKey Advanced " on the left menu and click New to add the Gateway, then
   Type the Gateway Name.
   Select Dynamic IP Address.
   Type the Peer ID fae@draytek.com
   Type the Preshared Key and then click Ok.
   Click Advanced.



6. Select the Proposal for Vigor Router.
   Select aggressive mode.
   Click Return.



7. Please click " VPN " -› " AutoKey IKE" on the left menu and click New to add the AutoIKE.
   Type the VPN Name.
   Select Remote Gateway which you set in the AutoKey Advanced.
   Click Ok.
   Click Advanced.



8. Select Proposal for Vigor Router.
   Click Return.



9. Please click "Policy" on the left menu.
   Select source Address which is local LAN.
   Select Destination Address which is Vigor's LAN.
   Select Service.
   Select "Tunnel" of Action.
   Select VPN tunnel which you set in AutoKey IKE(P2) and then click ok.



10. Please click "Policy" on the left menu.
   Select source Address which is Vigor's LAN.
   Select Destination Address which is Local LAN.
   Select Service.
   Select "Tunnel" of Action.
   Select VPN tunnel which you set in AutoKey IKE(P2) and then click ok.