NetComm Wireless 4G M2M Router
The following table describes each of the fields of the IPSec VPN Connection Settings page.
Enables or disables the VPN profile.
A name used to identify the VPN connection profile.
The IP address or domain name of the IPSec server.
Select the type of key mode in use for the VPN connection. You can select from:
Pre Shared Key
RSA keys
Certificates
The pre-shared key is the key that peers used to authenticate each other for Internet Key Exchange.
Displays the last time the key was updated.
Select the RSA key file for the local router here by clicking the Browse button.
Select the RSA key file for the remote router here by clicking the Browse button.
The Private key passphrase of the router is the passphrase used when generating the router’s private key using
OpenSSL CA.
Select the type of key or certificate to use for authentication. You can select Local private key, Local public certificate,
Remote public certificate, CA certificate, CRL certificate.
Select the IPSec certificate to upload by clicking the Browse button.
Specifies the domain name of the remote network.
Specifies the domain name of the local network.
Select the IKE mode to use with the VPN connection. You can choose Main, Aggressive or Any.
Choose whether Perfect Forward Secrecy is ON or OFF for the VPN connection.
Select the cipher type to use for the Internet Key Exchange.
Select the IKE Hash type to use for the VPN connection. The hash is used for authentication of packets for the key
exchange.
Select the desired Diffie-Hellman group to use. Higher groups are more secure but also require longer to generate a key.
Enter the time in seconds between changes of the encryption key. To disable changing the key, set this to 0.
Select the desired Dead Peer Detection action. This is the action to take when a dead Internet Key Exchange Peer is
detected.
Enter the time in seconds for the interval between Dead Peer Detection keep alive messages.
Enter the time in seconds of no response from a peer before Dead Peer Detection times out.
Enter the time in seconds for the security association lifetime.
Enter the IP address of the remote network for use on the VPN connection.
Enter the subnet mask in use on the remote network.
Enter the IP address of the local network for use on the VPN connection.
Enter the subnet mask in use on the local network.
Select the encapsulation protocol to use with the VPN connection. You can choose ESP, AH or Any.
Select the IPSec encryption type to use with the VPN connection.
Select the IPSec hash type to use for the VPN connection. The hash is used for authentication of packets for the VPN
connection.
Table 18 - IPSec Configuration Items