To Next Page

To Previous Page

258 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F

Figure 3-173. VPN - IPsec Policy and Connection menus

Following additional parameters are available for configuration in IPsec policy and connection entries:

 Connection Type – net-to-net or host-to-host.The net-to-net type signifies IPsec tunnel mode. The

host-to-host type signifies the IPsec transport mode.

 Life Time – 15-1440. The time interval, in minutes, after which the IPsec security association

expires.

 Failure Retry Interval – 1-255. The number of minutes to wait after repeated failed VPN

connections before retrying.

 Periodic Retry Interval – 15-255. The periodic attestation time, in minutes. Used only in IMA

connections. See APPENDIX B – Integrity Measurement Authority (IMA).

 Inbound Firewall Filter – Apply an existing packet filter to the incoming traffic on this connection.

See section 3.8.8 Access Control List (Packet Filtering / Firewall) for more information. An inbound

filter to the connection must be applied, or no traffic will pass. If a filter hasn’t been created

specifically for the VPN connection, use the preconfigured filter IN_TRUSTED, which allows all

inbound traffic.

 Outbound Firewall Filter – Apply an existing packet filter to the outgoing traffic on this connection.

See section 3.8.8 Access Control List (Packet Filtering / Firewall) for more information. An outbound

filter to the connection must be applied, or no traffic will pass. If a filter hasn’t been specifically

created for the VPN connection, use the preconfigured filter OUT_TRUSTED, which allows all

outbound traffic.

 Static NAT – Apply an existing static Network Address Translation (NAT) rule set to the connection.

See 3.8.11 Static NAT for more information

NOTE The VPN connections that are configured using the VPN service menu cannot be modified

using the VPN wizard.

Using the CLI

The CLI can also be used to configure VPN.

GE MDS ORBIT ECR User Manual

Questions and Answers: