D-Link DIR-806A, User Manual

Page: 148 / 180

DIR-806A Wireless AC750 Dual Band Router
User Manual
Parameter Description
Enable PFS
Move the switch to the right to enable the PFS option ( Perfect
Forward Secrecy ). If the is moved to the right, a new encryption key
exchange will be used for Phase 2. This option increases the security
level of data transfer.
Second phase
PFSgroup type
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
down list. The field is available, if the
Enable PFS switch is moved
to the right.
IPsec-SA lifetime
The lifetime of IPsec-SA keys in seconds. After the specified period it
is required to renegotiate the keys. Specify
0
if you don't want to limit
the lifetime of the keys.
If you need to specify IP addresses of local and remote subnets for creating a tunnel, click the ADD
button in the Tunneled Networks section.
Figure 119. The page for adding an IPsec tunnel. The window for adding a tunneled network.
In the opened window, you can specify the following parameters:
Parameter Description
Local network A local subnet IP address and mask.
Remote subnet A remote subnet IP address and mask.
To edit fields in the Tunneled Networks section, select the relevant line in the table. In the
opened window, change the needed parameters and click the SAVE button.
To remove a subnet, select the checkbox located to the left of the relevant line in the table and click
the
Delete button. Also you can remove a subnet in the editing window.
After configuring all needed settings for the IPsec tunnel, click the APPLY button.
After clicking the APPLY button, the page with the Tunnels and Status sections opens. In the
Status section, the current state of an existing tunnel is displayed.
To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the APPLY button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the
Delete button. Also you can remove a tunnel on the editing page.
To disable VPN tunnels based on IPsec protocol, move the Enable switch to the left.
Page 148 of 180