Field
Description
Lifetime
Define how the lifetime is defined that will expire before phase 2
SAs need to be renewed.
The new SAs are negotiated shortly before expiry of the current
SAs. As for RFC 2407, the default value is eight hours, which
means the key must be renewed once eight hours have
elapsed.
The following options are available for defining the Lifetime:
• Input in Seconds: Enter the lifetime for phase 2 key in
seconds. The value can be a whole number from
to
( (
. The default value is
(
.
• Input in kBytes: Enter the lifetime for phase 2 keys as amount
of data processed in kBytes. The value can be a whole num-
ber from
to
( (
. The default value is
.
Rekey after : Specify the percentage in the course of the lifetime
at which the phase 2 keys are to be regenerated.
The percentage entered is applied to both the lifetime in
seconds and the lifetime in kBytes.
The default value is
%.
The menu Advanced Settings consists of the following fields:
Fields in the Advanced Settings menu.
Field
Description
IP Compression
Select whether compression is to be activated before data en-
cryption. If data is compressed effectively, this can result in
higher performance and a lower volume of data to be trans-
ferred. In the case of fast lines or data that cannot be com-
pressed, you are advised against using this option as the per-
formance can be significantly affected by the increased effort
during compression.
The function is enabled with
7+
.
The function is disabled by default.
Alive Check
Select whether and how IPSec heartbeats are used.
A bintec elmeg IPSec heartbeat is implemented to determine
14 VPN
bintec elmeg GmbH
262
be.IP 4isdn
