Changes

Line 37: Line 37:     
* Below are explanations of the parameters highlighted in the figure above. Other parameters (not highlighted) are defaults. You can find descriptions for these parameters in the '''[[VPN#GRE Tunnel|VPN manual page, GRE Tunnel section]]'''
 
* Below are explanations of the parameters highlighted in the figure above. Other parameters (not highlighted) are defaults. You can find descriptions for these parameters in the '''[[VPN#GRE Tunnel|VPN manual page, GRE Tunnel section]]'''
** '''Enable''' - enables the IPsec instance
+
** '''Enable''' - enables the GRE Tunnel instance
** '''Local IP address/Subnet mask''' - LAN IP address/Subnet mask of the router on which the IPsec instance is configured
+
** '''Remote endpoint IP address''' - the Public IP address of the opposite router
** '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match on both instances
+
** '''Remote network''' - LAN IP address of the opposite router
** '''Remote VPN endpoint''' - the Public IP address of the opposite router
+
** '''Remote network netmask''' - subnet mask of the opposite router's LAN
** '''Remote IP address/Subnet mask''' - LAN IP address/Subnet mask of the opposite router
+
** '''Local tunnel IP''' - virtual IP address the GRE Tunnel instance
** '''Enable keepalive''' - enables the tunnel's keep alive function. When enabled, the instance sends ICMP packets to the specified host at the specified frequency. If no response is received, the instance attempts to restart the connection
+
** '''Local tunnel netmask''' - subnet mask of the local GRE Tunnel
*** '''Host''' - hostname or IP address to which ICMP packets will be sent to. Best to use a hostname/IP address belonging to the opposite instance's LAN. For this example we just use the other router's LAN IP address
+
** '''Enable Keep alive''' - enables the tunnel's keep alive function. When enabled, the instance sends ICMP packets to the specified host at the specified frequency. If no response is received, the instance attempts to restart the connection
*** '''Ping period (sec)''' - the period (in seconds) at which ICMP packets will be sent to the specified host
+
*** '''Kepp alive Host''' - hostname or IP address to which Keep alive packets will be sent to. Best to use a hostname/IP address belonging to the opposite instance's LAN. For this example we just use the other router's LAN IP address
** '''Allow WebUI access''' - when checked, allows WebUI access for hosts from the opposite instance
+
*** '''Keep alive interval''' - the period (in seconds) at which Keep alive packets will be sent to the specified host
 
'''NOTE''': remember to replace certain parameter values (like IP addresses) with your own relevant data.
 
'''NOTE''': remember to replace certain parameter values (like IP addresses) with your own relevant data.
 +
 
==See also==
 
==See also==