Configuring Virtual Private Networking (VPN) Configure Internet Protocol security (IPsec)
Digi TransPort® Routers User Guide
508
Send RESPONDER-LIFETIME notifications
Enables RESPONDER-LIFETIME notifications sent to the initiator. If an initiator requests an IKE
lifetime that is greater than the responder, a notification will be sent and the initiator should
reduce its lifetime value accordingly.
Retain phase 1 SA after failed phase 2 negotiation
The name of a X.509 certificate file holding the router’s private part of the public/private key
pair in certificate exchanges. See Use X.509 certificates with IPsec tunnels for further
explanation.
RSA private key file
The name of a X.509 certificate file holding the router’s private part of the public/private key
pair in certificate exchanges. See Use X.509 certificates with IPsec tunnels for further
explanation.
SA Removal Mode
Determines how IPsec and IKE SAs are removed.
n Normal operation will not delete the IKE SA when all the IPsec SAs that were created by
it are removed and will not remove IPsec SAs when the IKE SA that created them is
deleted.
n Remove IKE SA when last IPSec SA removed deletes the IKE SA when all the IPsec
SAs that it created to a particular peer are removed.
n Remove IPSec SAs when IKE SA removed deletes all IPSec SAs that have been
created by the IKE SA that has been removed.
n Both removes IPSec SAs when their IKE SA is deleted, and delete IKE SAs when their
IPSec SAs are removed.
Delete SAs when invalid SPI notifications are received
Deletes IKE SAs when the router receives invalid SPI notifications.
3. Click Apply.
Command line
Command Instance Parameter Values Equivalent web parameter
ike 0 inactto 0-255 Stop IKE negotiation if no
packet received for n seconds
ike 0 natt on, off Enable NAT-Traversal
ike 0 initialcontact on, off Send INITIAL-CONTACT
notifications
ike 0 respltime on, off Send RESPONDER-LIFETIME
notifications
ike 0 keepph1 on, off Retain phase 1 SA after failed
phase 2 negotiation
To Next Page
Loading...
