IKE Proposal Encryption Algorithm
Encryption algorithms to be used during negotiation.
IKE Proposal DhGroup
Diffie-Hellman group to used be used during negotiation.
Associated Tunnels List / Associated Transport List
Select one or more tunnels configured in the Tunnel tab. Only tunnel mode, or only transport mode tunnels
can be selected, not both types for the same connection.
ADVANCED SETTINGS
DPD Delay
Defines the interval between checking remote gateway. Default value is 30 seconds
DPD Timeout
Defines the timeout after which all connections to a peer are deleted. Applies only to IKEv1. Must be greater
than DPD Delay. Default value is 300 seconds
Exchange mode
Main or Aggressive. Aggressive is faster (as less messages to establish connection) but is not recommended
due to known security flaws. Only valid for IKEv1 or mixed connections.
Initiator mode
Always on: Immediately start key exchange when created, or at router startup. On Demand: Start key
exchange when matching tunnel traffic detected. Default value is Always On
Role
Responder waits for connection from peer. Initiator initiates the connection.
IKE SA Lifetime
Specifies the number of seconds an IKE SA (security association) will live before expiring.
To Next Page
Loading...
