TRENDNET AX1800 Dual Band Wifi 6 Gigabit Dual Wan VPN SMB Router User Guide

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

TEW-929DRU  

TRENDnet User’s Guide  

Below is a reference of the additional IPsec VPN settings if you choose to make other  

configuration changes to these sections.  

o

PFS exchange – The Perfect Forward Secrecy group used for IPsec  

phase 2. PFS adds additional security to the IPsec tunnel by forcing re-  

negotiation of phase 1 keys for every new pair of phase 2 SAs (security  

associations) established. Group 14 (2048 bit) offers the highest  

degree of security.  

•

•

Certificate List – Used for IPsec tunnels requiring the RSA authentication type.  

You can create or import IPsec certificates under Administrator > Certificate  

Management.  

•

DPD (Dead Peer Detection) – DPD implements a keep alive/monitoring  

function to the IPsec tunnel to check if IPsec peers are still active and  

responding.  

Local ID/Remote ID – This parameter is only required for IPsec tunnels with the  

RSA authentication type. If not using RSA, this additional parameter can be  

added for extra security in identification of the IPsec peers. (e.g. Local ID  

assigned CN=vpnsite1.trendnet.com and Remote ID CN=vpnsite2.trendnet.com)  

Authentication Key – This is the PSK (pre-shared key) used for IPsec tunnels  

requiring the PSK authentication type.  

o

DPD action - Sets the action when IPsec peers do not respond to DPD  

messages within the DPD delay interval. Clear will automatically close  

the IPsec connection and will not attempt to re-negotiate the  

connection, Hold will keep the connection and will attempt to re-  

negotiate the connection on-demand only when new traffic is sent  

through the tunnel, Restart will immediately force re-negotiation of  

the connection.  

DPD delay – Sets the time interval when DPD messages are sent o  

IPsec peers to check the alive status.  

DPD timeout – Sets the maximum timeout interval when IPsec  

connections are completely deleted due to inactivity.  

•

•

XAUTH Account – This parameter provides an additional layer of security by  

requiring a user name and password for authentication of the IPsec tunnel and  

required for IPsec XAUTH PSK tunnel type.  

o

o

•

EAP Account – This parameter provides an additional layer of security by  

requiring a user name and password for authentication of the IPsec tunnel and  

required for IPsec IKEv2 RSA EAP_MS_CHAPv2 tunnel type.  

Phase 1 settings  

Phase 1 auto configure – Checking this option automatically configures the  

•

IPsec Phase 1 parameters for the tunnel. Unchecking this option allows you to  

manually set the IPsec Phase 1 parameters.  

o

o

o

Cipher algorithm – The encryption/cipher algorithm used for IPsec  

phase 1. AES 256-bit offers the highest degree security.  

Hash algorithm – The authentication/hash algorithm used for IPsec  

phase 1. SHA2 256-bit offers highest degree of security.  

DH exchange – The Diffie-Hellman group used for IPsec phase 1 key  

exchange. Group 14 (2048 bit) offers the highest degree of security.  

Phase 2 settings  

•

Phase 2 auto configure – Checking this option automatically configures the  

IPsec Phase 2 parameters for the tunnel. Unchecking this option allows you to  

manually set the IPsec Phase 2 parameters.  

o

Transform algorithm – The encryption/cipher algorithm used for IPsec  

phase 2. AES 256-bit offers the highest degree security.  

o

Hash algorithm – The authentication/hash algorithm used for IPsec  

phase 2. SHA2 256-bit offers highest degree of security.  

© Copyright 2023 TRENDnet. All Rights Reserved.  

65  

VIEW FULL SCREEN PDF MANUAL

General	Details
Name	TRENDNET AX1800 Dual Band Wifi 6 Gigabit Dual Wan VPN SMB Router User Guide
Make	TRENDnet
Language	English
Filetype	PDF (Download)
File size	2.5 MB

Download PDF

(1 votes, average: 5.00 out of 5)

Loading...

• ALL WI-FI INSTRUCTIONS & USER MANUALS
• TRENDnet

Questions and Answers (0)

If you have any questions regarding TRENDNET AX1800 Dual Band Wifi 6 Gigabit Dual Wan VPN SMB Router User Guide, please ask here and describe the problem in detail.