DIR-816L Wireless AC750 Dual Band Router & Access Point
with 3G/CDMA/LTE Support and USB Port
User Manual
Configuring Device (Router Mode)
Parameter Description
Enable PFS
Select the checkbox to enable the PFS option (Perfect Forward
Secrecy). If the checkbox is selected, a new encryption key exchange
will be used for Phase 2. This option increases the security level of
data transfer.
Second phase
PFSgroup type
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
down list. The field is available, if the Enable PFS checkbox is
selected.
IPsec-SA lifetime
The lifetime of IPsec-SA keys in seconds. After the specified period it
is required to renegotiate the keys. Specify 0 if you don't want to limit
the lifetime of the keys.
If you need to specify IP addresses of local and remote subnets for creating a tunnel, click the Add
button in the Tunneled networks section.
Figure 147. The page for adding an IPsec tunnel.
In the line displayed, you can specify the following parameters:
Parameter Description
Local subnet A local subnet IP address and mask.
Remote subnet
A remote subnet IP address and mask.
To edit fields in the Tunneled networks section, select a needed field in the relevant line of the
table and change its value.
To remove IP addresses of subnets, select the checkbox located to the left of the relevant line in the
table and click the Delete button.
Click the Apply button.
After clicking the Apply button, the page with the sections IPsec and Status opens.
To edit the parameters of an existing tunnel, in the IPsec section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the Apply button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the Delete button.
In the Status section, the current state of an existing tunnel is displayed.
To disable VPN tunnels based on IPsec protocol, deselect the Enabled checkbox.
Page 188 of 304
To Next Page
Loading...
