Configure Virtual Private Networking (VPN) IPsec parameters
Digi TransPort WR Routers User Guide 440
Retain phase 1 SA after failed phase 2 negotiation
Normally IKE functionality is to remove the phase 1 SA if the phase 2 negotiation fails. Enabling
this parameter will cause the router to retain the existing phase 1 SA and retry the phase 2 again.
RSA private key file
The name of a X.509 certificate file holding the router’s private part of the public/private key pair
in certificate exchanges. See X.509 Certificates section for further explanation.
SA Removal Mode
Determines how IPsec and IKE SAs are removed.
• Normal operation does not delete the IKE SA when all the IPsec SAs that were created by it
are removed and does not remove IPsec SAs when the IKE SA that created them is deleted.
• Remove IKE SA when last IPSec SA removed deletes the IKE SA when all the IPsec SAs that
it created to a particular peer are removed.
• Remove IPSec SAs when IKE SA removed deletes all IPSec SAs that have been created by
the IKE SA that has been removed.
• Both removes IPSec SAs when their IKE SA is deleted, and deletes IKE SAs when their IPSec
SAs are removed.
To Next Page
Loading...
