Moxa EDR-810-VPN-2GSFP [125/139] Key exchange ipsec phase i

Industrial Secure Router User's Manual Virtual Private Network (VPN)

9-5

Local Network / Netmask / ID

Setting Description Factory Default

IP Address IP address of local VPN network IP address of LAN

interface

Subnet Mask Subnet Mask of local VPN network Netmask of LAN

interface

ID ID for indentifying the VPN tunnel connection.

The Local ID must be equal to the Remote ID of the VPN

Gateway. Otherwise, the VPN tunnel cannot be established

successfully

None

Remote Network / Netmask / ID

Setting Description Factory Default

IP Address IP address of Remote VPN network 0.0.0.0

Subnet Mask Subnet Mask of local VPN network 0.0.0.0

ID ID for indentifying the VPN tunnel connection.

The Local ID must be equal to the Remote ID of the VPN

Gateway. Otherwise, the VPN tunnel cannot be established.

None

Key Exchange (IPSec phase I)

IKE Mode

Setting Description Factory Default

Main In “Main” IKE Mode, both the Remote and Local VPN gateway

will negotiate

which Encryption/Hash algorithm and DH groups

can be used in this VPN tunnel; both VPN gateways must use

the same algorithm to communicate.

MAIN

Aggressive In “Aggressive” Mode, the

Remote and Local VPN gateway will

not negotiate the algorithm; it will use the user’

s configuration

only.

Authentication Mode

Setting Description Factory Default

Pre-Shared Key

The authentication mode of IPSec VPN Pre-Shared Key

X.509

In Pre-Shared Key Mode, the user needs to key-in the same Pre-Shared Key in the IPSec setting between the

Local and Remote secure router.

In X.509 Mode, the user needs to upload the Local and Remote certifications first, and then select the

certifications from the drop-down list.