Virtual Private Networks (VPN)
IPsec
Digi Connect EZ Mini User Guide
133
h. For Lifetime margin, enter a randomizing amount of time before the IPsec tunnel is
renegotiated.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the
format
number
{
w|d|h|m|s
}.
For example, to set
Lifetime margin
to ten minutes, enter
10m
or
600s
.
i. Click to expand
Phase 1 Proposals
.
i. Click
to create a new phase 1 proposal.
ii. For
Cipher
, select the type of encryption.
iii. For
Hash
, select the type of hash to use to verify communication integrity.
iv. For
Diffie-Hellman group
, select the type of Diffie-Hellman group to use for key
exchange.
v. You can add additional Phase 1 proposals by clicking
next to
Add Phase 1
Proposal
.
j. Click to expand
Phase 2 Proposals
.
i. Click
to create a new phase 2 proposal.
ii. For
Cipher
, select the type of encryption.
iii. For
Hash
, select the type of hash to use to verify communication integrity.
iv. For
Diffie-Hellman group
, select the type of Diffie-Hellman group to use for key
exchange.
v. You can add additional Phase 2 proposals by clicking
next to
Add Phase 2
Proposal
.
22. (Optional) Click to expand
Dead peer detection
. Dead peer detection is enabled by default.
Dead peer detection uses periodic IKE transmissions to the remote endpoint to detect whether
tunnel communications have failed, allowing the tunnel to be automatically restarted when
failure occurs.
a. To enable or disable dead peer detection, click
Enable
.
b. For
Delay
, type the number of seconds between transmissions of dead peer packets. Dead
peer packets are only sent when the tunnel is idle.
c. For
Timeout
, type the number of seconds to wait for a response from a dead peer packet
before assuming the tunnel has failed.
23. (Optional) Click to expand
NAT
to create a list of destination networks that require source NAT.
a. Click
next to
Add NAT destination
.
b. For
Destination network
, type the IPv4 address and optional netmask of a destination
network that requires source NAT. You can also use
any
, meaning that any destination
network connected to the tunnel will use source NAT.
24. See
Configure SureLink active recovery for IPsec
for information about IPsec
Active recovery
.
25. (Optional) Click
Advanced
to set various IPsec-related time out, keep alive, and related values.
26. Click
Apply
to save the configuration and apply the change.
