Virtual Private Networks (VPN) IPsec
IX10 User Guide
312
n
The management priority for the IPsec tunnel interface. The active interface with the highest
management priority will have its address reported as the preferred contact address for
central management and direct device access.
n
Enable XAUTHclient authentication, and the username and password to be used to
authenticate with the remote peer.
n
Enable Mode-configuration (MODECFG) to receive configuration information, such as the
private IP address, from the remote peer.
n
Disable the padding of IKE packets. This should normally not be done except for compatibility
purposes.
n
Destination networks that require source NAT.
n
Depending on your network and firewall configuration, you may need to add a packet filtering
rule to allow incoming IPsec traffic.
n
Tunnel and key renegotiating
l
The lifetime of the IPsec tunnel before it is renegotiated.
l
The amount of time before the IKE phase 1 lifetime expires.
l
The amount of time before the IKEphase 2 lifetime expires
l
The lifetime margin, a randomizing amount of time before the IPsec tunnel is renegotiated.
Note if the remote networks for an IPsec tunnel overlap with the networks for a WAN internet
connection (wired, cellular, or otherwise), you must configure a static route to direct the traffic either
through the IPsec tunnel, or through the WAN (outside of the IPsec tunnel). See Configure a static
route for information about configuring a static route.
Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access
rights.
2. Access the device configuration:
Remote Manager:
a. Locate your device as described in Use Digi Remote Manager to view and manage your
device.
b. Click the Device ID.
c. Click Settings.
d. Click to expand Config.
Local Web UI:
a. On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
To Next Page
Loading...
Need help?
General
