Viper SC+™ IP Router for Licensed Spectrum PN 001-5008-000 Rev. C
| Page 110
Operating Mode
The Viper may be configured to operate as a VPN server or VPN client. (See specific disclaimers below.)
–
Server — Sets the Viper to operate as a VPN Server. (Viper must be configured as an RF Access Point.)
–
Client — Sets the Viper to operate as a VPN Client. (Must be configured as a non-Access Point on RF.)
The default setting is Client.
Notes:
An Access Point connects to the backhaul via its Ethernet port.
After changing this setting, click
Apply
to apply the new setting and refresh the page.
VPN Configuration – Server Settings
Block non-VPN Traffic
(Available on VPN servers only.)
The Viper can be set to block or allow non-VPN traffic.
–
Enabled — The VPN service blocks all packets from the RF link that were not sent via a VPN tunnel.
–
Disabled — Non-matching traffic is not blocked.
The default setting is Enabled.
Notes:
This setting is especially useful for blocking devices that are not configured for VPN operation from sending
packets to the backhaul network.
A VPN server automatically sets this parameter on its clients during key exchange.
Status Frequency
(Available on VPN servers only.)
The number of seconds between server status advertisements sent to VPN clients. An advertisement consists of a
few packets sent at an interval determined by the Network Latency setting. A server’s status includes its VPN
service state (enabled or disabled) and load (0-100% tunnel capacity in use).
A non-zero value permits VPN clients to “discover” servers (they do not need to be preconfigured with server IP
addresses). Clients that are aware of more than one server can intelligently select one based on its advertised load.
Notes:
This value does not affect the server statuses that are sent whenever a VPN server is enabled or disabled.
Server status packets are broadcast over radio links to minimize traffic. Devices acting as radio-relays must
therefore explicitly enable station relay mode to forward server statuses.
A VPN server automatically sets this parameter on its clients during key exchange.
Default = 10 seconds
Minimum = 5 seconds (0 = disabled)
Maximum = 60 seconds (1 minute)
Idle Timeout
(Available on VPN servers only.)
The number of minutes with no traffic received from a VPN tunnel before attempting an Idle Probe and/or Key
Exchange. When Idle Probes are disabled, the Idle Timeout will simply trigger Key Exchange.
Notes:
This value affects the time it takes for VPN clients to re-establish their tunnels after a VPN server is
restarted.
A VPN server automatically sets this parameter on its clients during key exchange.
Default = 15 minutes
Minimum = 0 minutes (disabled)
Maximum = 60 minutes (1 hour)
Idle Probes
(Available on VPN servers only.)
On Idle Timeout, this sets the number of Idle Probes to send without receiving a reply. An Idle Probe attempt
consists of a 100-byte UDP packet that is sent and received via a VPN tunnel. A successful send and receive
prevents premature key exchange for that VPN tunnel.
