H o w

How to establish a VPN connection between Vigor router
and AboCom router (e.g., MH200)?
Vigor router (Dial-out end):
---------------------------------------------------Taiwan AboCom MH-200 (Dial-in end):
---------------------------------------------------Use IPSec- AES-SHA1 VPN tunnel for connection:
Note: You can, also, set Vigor router as dail-in end and AboCom MH-200 as dial-out end.
Corresponding Settings for Vigor router (example -- Vigor2910):
1. Open VPN and Remote Access>>LAN to LAN from Vigor2910 web configurator.
Enable this profile
Check this box to enable such profile.
Call Direction
Choose Dial-Out and check Always on. Dial out side will try to
connect continuously if it is off-line.
Dial-Out Setting
Type the IP address of remote VPN server IP.
Click and type Pre-Shared Key. Such key must be set with the same
value configured in MH-200.
2. Next, click Advanced to open the following page. Look at the authentication and encryption
method used by Phase1 and Phase 2.
In Phase 2, AES/SHA1 will be used first to authenticate the remote client. If it fails, the system
will use AES/MD5 to authenticate next. In Phase 1, DES-MD5 , DES-SHA1 , 3DES-MD5 will
be used to authenticate sequentially. It depends on the practical operation and environment.
3. Next, set the subnet for remote side (MH-200), e.g.,
4. Finish the corresponding settings for Vigor2910.
Corresponding Settings for AboCom MH-200
1. Open VPN Auto Key Management Channel and configure the following settings.
2. Set the subnet/mask as。
Remote Gateway of Destination - - Static IP: Type WAN IP address and subnet mask of
Vigor2910 --
Authentication: Set the pre-shared key. The key value must be set the same as configured in
Encryption/Authentication Algorithm for ISAKMP: Here, Group 1 is chosen with the settings
of 3DES-MD5. It must be the same as the setting configured with 3DES_MD5_G1 (the third
priority listed in phase1) in Vigor2910
Encryption/Authentication Algorithm for IPSec: Must correspond to the content set in Phase2
(the first priority) in Vigor2910.
3. Finish the corresponding settings for AboCom MH-200.
Check the connection status
In Vigor2910
In AboCom MH-200
Use the Telnet command of Vigor2910 to ping the LAN IP ( of MH200. The
message displayed on the screen also indicates the connection is OK.