Comset CM685VX, User Manual

Page: 57 / 108

CM685VX User Manual
57
www.comset.com.au
 Local endpoint : Domain name, IP address or interface name of this device.
 Local IKE identifier : Identity to use for the local device authentication.
 Remote IKE identifier : Identity to use for the remote device authentication.
 Preshared Keys : This is known as PSK. The length is 16 to 32.
 Perfect Forward Secrecy : Enable or Disable.
 DPD action : This controls the use of DPD RFC 3706 (Dead Peer Detection
protocol), where R_U_THERE notification messages (IKEv1) or empty
INFORMATIONAL messages (IKEv2) are periodically sent in order to check the
liveliness of the IPSec peer. The values clear, hold, and restart all activate DPD and
determine the action to perform on a timeout. With clear the connection is closed
with no further actions taken. hold installs a trap policy, which will catch matching
traffic and tries to re-negotiate the connection on demand. restart will immediately
trigger an attempt to re-negotiate the connection. The default is none which disables
the active sending of DPD messages.
 DPD delay : This defines the period time interval with which R_U_THERE
messages/INFORMATIONAL exchanges are sent to the peer.
 DPD timeout : This defines the timeout interval, after which all connections to a peer
are deleted in case of inactivity.
 NAT traversal : This indicates whether the device is behind a NAT device or not.
 Local source ip : The internal source IP of the local device to use in a tunnel, also
known as virtual IP.
 Remote source ip : The internal source IP of the remote device to use in a tunnel,
also known as virtual IP.
 Local subnet : The local subnet which connects to the IPSEC VPN.
 Remote subnet : The remote subnet which connects to the IPSEC VPN.