function showVPN2()
{
dw("<FONT><B>VPN Settings - Manual key</B><A name=VPN1></A><BR>")
dw("<FONT SIZE=2><UL><I><B>Tunnel name</B></I> :Indicate which tunnel that is focused now.<BR>")
dw("<I><B>Local subnet</B></I> :The subnet of LAN site of local VPN gateway. It can be a host, a partial subnet, or the whole subnet of LAN site of local gateway.<BR>")
dw("<I><B>Local netmask</B></I> :Local netmask combined with local subnet to form a subnet domain.<BR>")
dw("<I><B>Remote subnet</B></I> :The subnet of LAN site of remote VPN gateway, it can be a host, a partial subnet, or the whole subnet of LAN site of remote gateway.<BR>")
dw("<I><B>Remote netmask</B></I> :Remote netmask combined with remote subnet to form a subnet domain of remote end.<BR>")
dw("<I><B>Remote gateway</B></I> :The IP address of remote VPN gateway.<BR>")
dw("<I><B>Local SPI</B></I> :SPI is an important parameter during hashing. Local SPI will be included in the outbound packet transmitted from WAN site of local gateway. The value of local SPI should be set in hex formatted.<BR>")
dw("<I><B>Remote SPI</B></I> :Remote SPI will be included in the inbound packet transmitted from WAN site of remote gateway. It will be used to de-hash the coming packet and check its integrity. The value of remote SPI should be set in hex formatted.<BR>")
dw("<I><B>Encapsulation protocol</B></I> : There are two protocols can be selected: ESP and AH.<BR>")
dw("<I><B>Encryption algorithm</B></I> : There are two algorithms can be selected: 3DES and DES. But when the encapsulation protocol is AH, encryption algorithm is unnecessarily set.<BR>")
dw("<I><B>Encryption key</B></I> :Encryption key is used by the encryption algorithm. Its length is 8 bytes if encryption algorithm is DES or 24 bytes if 3DES. The key value should be set in hex formatted.<BR>")
dw("<I><B>Authentication algorithm</B></I> : There are two algorithms can be selected: SHA1 and MD5. But none also can be selected here for no hashing operation.<BR>")
dw("<I><B>Authentication key</B></I> : Authentication key is used by the authentication algorithm. Its length is 16 bytes if authentication algorithm is MD5 or 20 bytes if SHA1. Certainly, its length will be 0 if no authentication algorithm is chosen. The key value should be set in hex formatted.<BR>")
dw("<I><B>Life time</B></I> : The unit of life time is based on the value of Life Time Unit. If the value of unit is second, the value of life time represents the life time of dedicated VPN tunnel between both end gateways. Its value ranges from 300 seconds to 172,800 seconds.")
dw("If the value of unit is KB, the value of life time represents the maximum allowable amount of transmitted packets through the dedicated VPN tunnel between both end gateways. Its value ranges from 20,480 KBs to 2,147,483,647 KBs.<BR>")
dw("<I><B>Life time unit</B></I> :There are two units can be selected: second and KB.<BR></UL><P><P></FONT>")
dw("<FONT><B>VPN Settings - Set IKE Proposal</B><A name=VPN21></A><BR>")
dw("<FONT SIZE=2><UL><I><B>IKE Proposal index</B></I> :A list of selected proposal indexes from the IKE proposal pool listed below. The selecting activity is performed by selecting a proposal ID and clicking \"add to\" button in the bottom of the page.")
dw(" There are only four indexes can be chosen from the proposal pool for the dedicated tunnel. Remove button beside the index list can remove selected proposal index before.<BR>")
dw("<I><B>Proposal name</B></I> :It indicates which IKE proposal to be focused. First char of the name with 0x00 value stands for the IKE proposal is not available.<BR>")
dw("<I><B>DH group</B></I> :There are three groups can be selected: group 1 (MODP768), group 2 (MODP1024), group 5 (MODP1536).<BR>")
dw("<I><B>Encryption algorithm</B></I> :There are two algorithms can be selected: 3DES and DES.<BR>")
dw("<I><B>Authentication algorithm</B></I> :There are two algorithms can be selected: SHA1 and MD5.<BR>")
dw("<I><B>Life time</B></I> :The unit of life time is based on the value of Life Time Unit. If the value of unit is second, the value of life time represents the life time of dedicated VPN tunnel between both end gateways. Its value ranges from 300 seconds to 172,800 seconds.")
dw("If the value of unit is KB, the value of life time represents the maximum allowable amount of transmitted packets through the dedicated VPN tunnel between both end gateways. Its value ranges from 20,480 KBs to 2,147,483,647 KBs.<BR>")
dw("<I><B>Life time unit</B></I> :There are two units can be selected: second and KB.<BR>")
dw("<I><B>Proposal ID</B></I> :The identifier of IKE proposal can be chosen for adding corresponding proposal to the dedicated tunnel. There are total ten proposals can be set in the proposal pool. At most only four proposals from the pool can be applied to the dedicated tunnel as shown in the proposal index list.<BR>")
dw("<I><B>Add to button</B></I> : Click it to add the chosen proposal indicated by proposal ID to IKE Proposal index list. The proposals in the index list will be used in phase 1 of IKE negotiation for getting the IKSAMP SA of dedicated tunnel.<BR></UL><P><P></FONT>")
dw("<FONT><B>VPN Settings - Set IPSec Proposal</B><A name=VPN22></A><BR>")
dw("<FONT SIZE=2><UL><I><B>IPSec Proposal index</B></I> :A list of selected proposal indexes from the IPSec proposal pool listed below. The selecting activity is performed by selecting a proposal ID and clicking \"add to\" button in the bottom of the page.")
dw("There are only four indexes can be chosen for the dedicated tunnel. Remove button beside the index list can remove selected proposal index before.<BR>")
dw("<I><B>Proposal name</B></I> :It indicates which IPSec proposal to be focused. First char of the name with 0x00 value stands for the proposal is not available.<BR>")
dw("<I><B>DH group</B></I> :There are three groups can be selected: group 1 (MODP768), group 2 (MODP1024), group 5 (MODP1536). But none also can be selected here for IPSec proposal.<BR>")
dw("<I><B>Encapsulation protocol</B></I> :There are two protocols can be selected: ESP and AH.<BR>")
dw("<I><B>Encryption algorithm</B></I> :There are two algorithms can be selected: 3DES and DES. But when the encapsulation protocol is AH, encryption algorithm is unnecessarily set.<BR>")
dw("<I><B>Authentication algorithm</B></I> :There are two algorithms can be selected: SHA1 and MD5. But none also can be selected here for IPSec proposal.<BR>")
dw("<I><B>Life time</B></I> :The unit of life time is based on the value of Life Time Unit. If the value of unit is second, the value of life time represents the life time of dedicated VPN tunnel between both end gateways. Its value ranges from 300 seconds to 172,800 seconds.")
dw("If the value of unit is KB, the value of life time represents the maximum allowable amount of transmitted packets through the dedicated VPN tunnel between both end gateways for. Its value ranges from 20,480 KBs to 2,147,483,647 KBs.<BR>")
dw("<I><B>Life time unit</B></I> :There are two units can be selected: second and KB.<BR>")
dw("<I><B>Proposal ID</B></I> :The identifier of IPSec proposal can be chosen for adding the proposal to the dedicated tunnel. There are total ten proposals can be set in the proposal pool. At most only four proposals from the pool can be applied to the dedicated tunnel as shown in the proposal index list.<BR>")
dw("<I><B>Add to button</B></I> : Click it to add the chosen proposal indicated by proposal ID to IPSec Proposal index list. The proposals in the index list will be used in phase 2 of IKE negotiation for getting the IPSec SA of dedicated tunnel.</UL>")
}