31,703
edits
Changes
→Basic tunnel
[[File:Creating an ipsec instance part 3 v2.png]]
[[File:Creating an ipsec instance part 3 v2.png]]
* Below are explanations of the parameters highlighted in the figure above. Other parameters (not highlighted) are defaults. You can find descriptions for these parameters in the '''[[VPN#IPsec|VPN manual page, IPsec section]]'''.
** '''Enable''' - enables the IPsec instance
** '''Local IP address/Subnet mask''' - LAN IP address/Subnet mask of the router on which the IPsec instance is configured
** '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match on both instances
** '''Remote VPN endpoint''' - the Public IP address of the opposite router
** '''Remote IP address/Subnet mask''' - LAN IP address/Subnet mask of the opposite router
** '''Enable keepalive''' - enables the tunnel's keep alive function. When enabled, the instance sends ICMP packets to the specified host at the specified frequency. If no response is received, the instance attempts to restart the connection
*** '''Host''' - hostname or IP address to which ICMP packets will be sent to. Best to use a hostname/IP address belonging to the opposite instance's LAN. For this example we just use the other router's LAN IP address
*** '''Ping period (sec) - the period at which ICMP packets will be sent to the specified host
** '''Allow WebUI access''' - when checked, allows WebUI access for hosts from the opposite instance
----
----
*
===Remote LAN access===
===Remote LAN access===
