IS200DAMDG2AAA自动化模块备件
这意味着远程PPTP VPN服务器控制来自PPTP客户端对等端的任何数据包流。认证协议1。所需设置2。默认情况下未选中为此PPTP隧道指定一个或多个身份验证协议。可用的身份验证方法为PAP/CHAP/MS-CHAP/MS-CHAP v2。MPPE加密1。默认情况下未选中2。可选设置指定PPTP服务器是否支持MPPE协议。单击启用框以启用MPPE。启用MPPE加密后，身份验证协议PAP/CHA选项将不可用。隧道1之前的NAT。所需设置2。默认情况下未选中指定此PPTP隧道是否需要NAT。LCP Echo Type Auto（LCP回声类型自动）默认设置为指定此PPTP隧道的LCP Echo类型。它可以是自动、用户定义或禁用。自动：系统设置间隔和最大故障时间。用户定义：输入间隔和最大故障时间。“间隔”的默认值为30秒，“故障时间”为6次。禁用：禁用LCP回声。值范围：间隔时间为1~99999，故障时间为1~999。默认情况下未选中隧道选中启用框以启用此PPTP隧道。保存单击保存按钮保存设置。撤消单击“撤消”按钮取消设置。后退单击后退按钮返回上一页。EW200工业蜂窝网关252 5.1.5 GRE通用路由封装（GRE）是由Cisco Systems开发的一种隧道协议，它将各种网络层协议封装在Internet协议互联网上的虚拟点对点链路内。为远程站点部署M2M网关，并使用GRE隧道与控制中心建立虚拟专用网络。然后，M2M网关后面的所有客户端主机可以与控制中心网关后面的服务器主机进行数据通信。GRE隧道与IPsec隧道类似，客户端请求与服务器建立隧道。客户端和服务器都必须具有静态IP或FQDN。任何对等网关都可以用作客户端或服务器，甚至可以使用相同的配置规则集。GRE隧道场景要设置GRE隧道，每个对等方需要将其全局IP设置为隧道IP，并将另一方的全局IP输入为远程IP。每个对等体必须进一步指定GRE服务器对等体内部网的远程子网项。在GRE客户端对等端，目的地位于专用子网中的数据包将通过GRE隧道传输。其他将基于GRE客户端对等端网关的当前路由策略进行传输。但是，如果在远程子网字段中输入0.0.0.0/0，它将被视为GRE客户端对等体的“默认网关”设置，所有数据包，包括GRE客户端对等的Internet访问，都将通过已建立的GRE隧道。这意味着远程GRE服务器对等体控制来自GRE客户端对等体的任何数据包流。如果GRE服务器支持DMVPN集线器功能，如Cisco路由器作为VPN集中器，GRE客户端可以在此激活DMVPN分支功能，因为它是通过GRE over IPsec隧道实现的。EW200工业蜂窝网关253 GRE设置转到安全>VPN>GRE选项卡。GRE设置允许用户创建和控制GRE隧道。启用GRE启用GRE窗口项值设置描述默认情况下未选中GRE隧道单击启用框以启用GRE功能。最大并发GRE隧道数取决于产品规格。指定的值将限制同时GRE隧道连接的数量。默认值将取决于设备型号。
That means the remote PPTP VPN server controls the flow of any packets from the PPTP client peer. Authentication Protocol 1. Required setting 2. Unchecked by default Specify one or multiple Authentication Protocols for this PPTP tunnel. Available authentication methods are PAP / CHAP / MS-CHAP / MS-CHAP v2. MPPE Encryption 1. Unchecked by default 2. Optional setting Specify whether PPTP server supports MPPE Protocol. Click the Enable box to enable MPPE. when MPPE Encryption is enabled, the Authentication Protocol PAP / CHAP options will t be available. NAT before tunneling 1. Required setting 2. Unchecked by default Specify whether NAT is required or t for this PPTP tunnel. LCP Echo Type Auto is set by default Specify the LCP Echo Type for this PPTP tunnel. It can be Auto, User-defined, or Disable. Auto: the system sets the Interval and Max. Failure Time. User-defined: enter the Interval and Max. Failure Time. The default value for Interval is 30 seconds, and Failure Times is 6 Times. Disable: disable the LCP Echo. Value Range: 1 ~ 99999 for Interval Time, 1~999 for Failure Time. Tunnel Unchecked by default Check the Enable box to enable this PPTP tunnel. Save Click Save button to save the settings. Undo Click Undo button to cancel the settings. Back Click Back button to return to the previous page. EW200 Industrial Cellular Gateway 252 5.1.5 GRE Generic Routing Encapsulation (GRE) is a tunneling protocol developed by Cisco Systems that encapsulates a wide variety of network layer protocols inside virtual point-to-point links over an Internet Protocol internetwork. Deploy an M2M gateway for a remote site and establish a virtual private network with control center by using GRE tunneling. Then, all client hosts behind M2M gateway can make data communication with server hosts behind control center gateway. GRE Tunneling is similar to IPsec Tunneling, with the client requesting the tunnel establishment with the server. Both the client and the server must have a Static IP or a FQDN. Any peer gateway can be worked as either a client or a server, even using the same set of configuration rules. GRE Tunnel Scenario To setup a GRE tunnel, each peer needs to setup its global IP as tunnel IP and enter the other's global IP as remote IP. Each peer must further specify the Remote Subnet item for the Intranet of GRE server peer. At GRE client peer, the packets whose destination is in the dedicated subnet will be transferred via the GRE tunnel. Others will be transferred based on current routing policy of the gateway at GRE client peer. But, if 0.0.0.0/0 is entered in the Remote Subnet field, it will be treated as a "Default Gateway" setting for the GRE client peer, and all packets, including the Internet accessing of GRE client peers, will go through the established GRE tunnel. That means the remote GRE server peer controls the flow of any packets from the GRE client peer. If the GRE server supports DMVPN Hub function, like Cisco router as the VPN concentrator, the GRE client can activate the DMVPN spoke function here since it is implemented by GRE over IPsec tunneling. EW200 Industrial Cellular Gateway 253 GRE Setting Go to Security > VPN > GRE tab. The GRE setting allows user to create and con GRE tunnels. Enable GRE Enable GRE Window Item Value setting Description GRE Tunnel Unchecked by default Click the Enable box to enable GRE function. Max. Concurrent GRE Tunnels Depends on Product specification. The specified value will limit the number of simultaneous GRE tunnel connections. The default value will depend on the device model.
