How to establish a VPN connection between Vigor router and AboCom router (e.g., MH200)? Vigor router (Dial-out end): WAN IP: 113.161.14.110 LAN IP: 192.168.10.240/255.255.255.0 ---------------------------------------------------Taiwan AboCom MH-200 (Dial-in end): WAN IP: 220.130.23.112 LAN IP: 192.168.41.1/255.255.255.0 ---------------------------------------------------Use IPSec- AES-SHA1 VPN tunnel for connection: Note: You can, also, set Vigor router as dail-in end and AboCom MH-200 as dial-out end. Corresponding Settings for Vigor router (example -- Vigor2910)： 1. Open VPN and Remote Access>>LAN to LAN from Vigor2910 web configurator. 1 Enable this profile Check this box to enable such profile. Call Direction Choose Dial-Out and check Always on. Dial out side will try to connect continuously if it is off-line. Dial-Out Setting Type the IP address of remote VPN server IP. IKE Key Click and type Pre-Shared Key. Such key must be set with the same value configured in MH-200. 2. Next, click Advanced to open the following page. Look at the authentication and encryption method used by Phase1 and Phase 2. In Phase 2, AES/SHA1 will be used first to authenticate the remote client. If it fails, the system will use AES/MD5 to authenticate next. In Phase 1, DES-MD5 , DES-SHA1 , 3DES-MD5 will be used to authenticate sequentially. It depends on the practical operation and environment. 3. Next, set the subnet for remote side (MH-200), e.g., 192.168.41.0/255.255.255.0. 4. Finish the corresponding settings for Vigor2910. 2 Corresponding Settings for AboCom MH-200 1. Open VPN Auto Key Management Channel and configure the following settings. 2. Set the subnet/mask as 192.168.41.0/255.255.255.0。 Remote Gateway of Destination - - Static IP: Type WAN IP address and subnet mask of Vigor2910 -- 192.168.10.0/255.255.255.0. Authentication: Set the pre-shared key. The key value must be set the same as configured in Vigor2910. Encryption/Authentication Algorithm for ISAKMP: Here, Group 1 is chosen with the settings of 3DES-MD5. It must be the same as the setting configured with 3DES_MD5_G1 (the third priority listed in phase1) in Vigor2910 Encryption/Authentication Algorithm for IPSec: Must correspond to the content set in Phase2 (the first priority) in Vigor2910. 3. Finish the corresponding settings for AboCom MH-200. 3 Check the connection status ¾ In Vigor2910 ¾ In AboCom MH-200 ¾ Use the Telnet command of Vigor2910 to ping the LAN IP (192.168.41.1) of MH200. The message displayed on the screen also indicates the connection is OK. 4