DVG-5402G/GF
Wireless AC1200 MU-MIMO Dual Band
Gigabit Router with Fiber WAN Port, 3G/LTE Support, 2 FXS
Ports, and USB Port
User Manual
Configuring via Web-based Interface
Parameter
Description
NAT Traversal
The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled device. DVG-5402G/GF allows to forcibly encapsulate
VPN traffic in UDP packets for passing through a remote device
regardless of whether it supports address translation.
If you need to enable forced encapsulation of VPN traffic, select the
Enabled
value.
If you need to disable forced encapsulation of VPN traffic, select the
Disabled
value
.
Mode
An operation mode of the IPsec tunnel. Select a value from the drop-
down list.
•
TUNNEL
: As a rule, it is used to create a secure connection to
remote networks. In this mode, the source IP packet is fully
encrypted and added to a new IP packet and data transfer is
based on the header of the new IP packet.
•
TRANSPORT
: As a rule, it is used to encrypt data stream
within one network. In this mode, only the content of the
source IP packet is encrypted, its header remains unchanged
and data transfer is based on the source header.
Allow traffic from
IPsec to router
Move the switch to the left to deny access to your router from the
remote subnet via IPsec.
The switch is displayed when the
TUNNEL
value is selected from the
Mode
drop-down list.
Enable DPD
Move the switch to the right to enable using DPD protocol for this
tunnel. Such a setting allows to check the status of the remote host: if
encrypted packets exchange between the router and the remote host
breaks down, the router starts sending DPD messages to the remote
host. If the switch is moved to to the left, the
DPD delay
and
DPD
timeout
fields are not available for editing.
DPD delay
A time period (in seconds) between DPD messages. By default, the
value
30
is specified.
DPD timeout
A waiting period for the response to a DPD message (in seconds). If
the host does not answer in the specified time, the router breaks down
the tunnel connection, updates information on it, and tries to
reestablish the connection. By default, the value
120
is specified.
Page
134
of 311