Installation & Operation Manual 344 Document # LTRT-92224
Mediant 8000
Parameter Name Type
Provisioning
Type
Description
DPD Max Fail Integer
0 – 2147483647
Online If DPD is activated, sets the maximum
number of proof of liveliness to request
(without reply) before considering the peer
to be dead.
Supported on SC Rev.2 (Linux OS based)
boards only.
NAT Traversal Enum
Off, On, Force
Online Enables use of the NAT-Traversal IPsec
extension (NAT-T). NAT-T allows one or
both peers to reside behind a NAT gateway
(i.e., doing address- or port-translation).
Presence of NAT gateways along the path
is discovered during phase 1 handshake
and if found, NAT-T is negotiated. When
NAT-T is in charge, all ESP and AH
packets of a given connection are
encapsulated into UDP datagrams (port
4500, by default).
On - NAT-T is used when a NAT gateway
is detected between the peers.
Off - NAT-T is not proposed/accepted. This
is the default.
Force - NAT-T is used regardless if a NAT
is detected between the peers or not.
Supported on SC Rev.2 (Linux OS based)
boards only.
To add and configure SC IKE Proposal:
1. Select the SC IPSEC Rule that you want to configure.
2. In the Navigation pane, select SC IKE Proposals; the SC IKE Proposals list is
displayed.
3. Use the
or buttons to add or remove entries.
4. Select a specific row and then in the configuration pane, click SC IKE Proposal
Settings; the SC IKE Proposal Settings screen is displayed.
5. Configure the SC IKE Proposal parameters according to the table below.
To Next Page
Loading...
