Digi TransPort WR11 - Page 512

Configuring Virtual Private Networking (VPN) Configure Internet Protocol security (IPsec)
Digi TransPort® Routers User Guide
512
Rekey after h hrs m mins s secs
When the time left until expiry for this SA reaches the value specified by this parameter, the
IKEv2 SA will be renegotiated, such as a new IKEv2 SA is negotiated and the old SA is removed.
Any IPSec child SAs that were created are retained and become children of the new SA.
3. Click Apply.
Command line
Command Instance Parameter Values Equivalent web parameter
ike2 n iencalg des, 3des, aes Encryption
ike2 n ienkeybits 128, 192, 256 Encryption (AES Key length)
ike2 n iauthalg md5, sha1, sha256 Authentication
ike n rauthalgs sha256 PRF Algorithm
ike2 n iprfalg md5, sha1 PRF Algorithm
ike2 n idhgroup 1, 2, 5 MODP Group for Phase 1
ike2 n ltime 1-28800 Renegotiate after h hrs m mins s secs
This CLI value is entered in seconds only.
ike2 n rekeyltime 1-28800 Rekey after h hrs m mins s secs
This CLI value is entered in seconds only.
Configure advanced IKEv2 n parameters
ÉWeb
1. Go to Configuration > Network > Virtual Private Networking (VPN) > IPsec > IKEv2 >IKEv2
n > Advanced.
2. Configure the IKEv2 advanced parameters as needed:
Retransmit a frame if no response after n seconds
The amount of time in seconds that IKEv2 will wait for a response from the remote unit before
transmitting the negotiation frame.