Configuring Virtual Private Networking (VPN) Configure Internet Protocol security (IPsec)
Digi TransPort® Routers User Guide
513
Stop IKE negotiation after n retransmissions
The maximum number of times that IKEv2 will retransmit a negotiation frame as part of the
exchange before failing.
Stop IKE negotiation if no packet received for n seconds
The period of time, in seconds, after which the router will stop the IKE v2 negotiation when no
response to a negotiation packet has been received.
Enable NAT-Traversal
Enables support for NAT Traversal within IKE/IPsec. When one end of an IPsec tunnel is behind
a NAT box, some form of NAT traversal may be required before the IPsec tunnel can pass
packets. Turning NAT Traversal on enables the IKE protocol to discover whether or not one or
both ends of a tunnel is behind a NAT box, and implements a standard NAT traversal protocol if
NAT is not being performed. The version of NAT traversal supported is that described in the
IETF draft document draft-ietf-ipsec-nat-t-ike-03.
NAT traversal keep-alive interval n seconds
The interval, in seconds, in which the NAT Traversal keepalive packets are sent to a NAT device
in order to prevent NAT table entry from expiring.
RSA private key file
The name of a X.509 certificate file holding the router’s private part of the public/private key
pair in certificate exchanges. See Use X.509 certificates with IPsec tunnels for further
explanation.
3. Click Apply.
Command line
Command Instance Parameter Values Equivalent web parameter
ike2 n retranint 0-255 Retransmit a frame if no response after n seconds
ike2 n retran 0-9 Stop IKE negotiation after n retransmissions
ike2 n inactto 0-255 Stop IKE negotiation if no packet received for n
seconds
ike2 n natt on, off Enable NAT-Traversal
ike2 n natkaint Integer NAT traversal keep-alive interval n seconds
ike2 n privrsakey Filename RSA private key file
Configure IKEv2 Responder parameters
ÉWeb
1. Go to Configuration > Network > Virtual Private Networking (VPN) > IPsec > IKEv2 > IKEv2
Responder.
To Next Page
Loading...
