D-Link DSR-250N, User Manual

Page: 95 / 221

Unified Services Router
User Manual
93
Fig ur e 57: I Psec po li cy c onf ig ura tio n continued (Aut o pol icy v ia IK E)
A Manual policy does not use IKE and instead relies on ma nual keying to exchange
authentication parameters between the two IPsec hosts. The incoming and outgoing
security parameter index (SPI) values must be mirrored on the remote tunnel
endpoint. As well the encryption and integrity algorithms and keys must ma tch on the
remote IPsec host exactly in order for the tunnel to establish successfully. Note that
using Auto policies with IKE are preferred as in some IPsec implementations the SPI
(security parameter index) values require conversion at each endpoint.
DSR supports VPN roll-over feature. This means that policies configured on primary
WAN will rollover to the seconday WAN incase of a link failure on a primary WAN.
This feature can be used only if your WAN is configured in Auto-Rolleover mode.