DataRemote Pots In a Box CDS-9090 - Page 40

Remote WANs IP
Address/FQDN
the address of remote side IPSec VPN
server
Local LAN IP Address/
Subnet Mask Length
IPSec local protected subnet’s address.
Remote LAN IP
Address/ Subnet Mask
Length
IPSec remote protected subnet’s
address.
Policy Protocol
The policy protocol for encryption
Encapsulated Mode
Select the security protocols
NAT Enable
Enable NAT Traversal for IPSec. This
item must be enabled when router
under NAT environment.
Mode
Select from “Main” and “aggressive”
for the IKE negotiation mode in phase
1.
Encryption Algorithm
Select Encryption Algorithm to be
used in IKE negotiation.
Integrity Algorithm
Select Integrity Algorithm to be used
in IKE negotiation.
Diffie-Hellman (DH)
Group
Select Diffie-Hellman Group to be
used in key negotiation phase 1.
SA Lifetime of Phase 1
Set the lifetime in IKE negotiation.
DPD Time Interval(s)
Set the interval after which DPD is
triggered if no IPSec protected packets
is received from the peer.
DPD Timeout(s)
Set the timeout of DPD packets.