Robustel GoRugged R3000 - Page 69

Robustel GoRugged R3000 User Guide
RT_UG_R3000_v.3.0.3 04.02.2017 68 / 124
Confidential
SA Settings
Item
Description
Default
the local end sends an IPSec packet, DPD checks the time the last IPSec
packet was received from the peer. If the time exceeds the DPD interval, it
sends a DPD hello to the peer. If the local end receives no DPD
acknowledgment within the DPD packet retransmission interval, it
retransmits the DPD hello. If the local end still receives no DPD
acknowledgment after having made the maximum number of
retransmission attempts, it considers the peer already dead, and clears the
IKE SA and the IPSec SAs based on the IKE SA.
DPD Failures
Set the timeout of DPD packets.
180
Advanced Settings
Enable Compression
Tick to enable compressing the inner headers of IP packets.
OFF
Expert Options
format: config-desc;config-desc, e.g. protostack=netkey;plutodebug=none
Null
Status
This section allow user to check the status of the IPSec tunnel.
x509
User can upload the X509 certificate for the IPSec tunnel in this section.
x509
Item
Description
Default
Tunnel Name
Select the name of the tunnel.
Tunnel 1
Certificate Files
Choose the correct file to import the certificate into the router.
The correct file format as followings:
@ca.crt
@remote.crt
@local.crt
@private.key
Null