Digi TransPort WR11, User Manual

Page: 444 / 866

Configure Virtual Private Networking (VPN) IPsec parameters
Digi TransPort WR Routers User Guide 444
Advanced IKE Responder parameters
Stop IKE negotiation if no packet received for n seconds
The period of time in seconds after which the router will stop the IKE negotiation when no
response to a negotiation packet has been received.
Enable NAT-Traversal
Enables support for NAT Traversal within IKE/IPsec. When one end of an IPsec tunnel is behind a
NAT box, some form of NAT traversal may be required before the IPsec tunnel can pass packets.
Turning NAT Traversal on enables the IKE protocol to discover whether or not one or both ends
of a tunnel is behind a NAT box, and implements a standard NAT traversal protocol if NAT is not
being performed. The version of NAT traversal supported is that described in the IETF draft
document draft-ietf-ipsec-nat-t-ike-03.txt .
Send INITIAL-CONTACT notifications
Enables INITIAL-CONTACT notifications to be sent.
Send RESPONDER-LIFETIME notifications
Enables RESPONDER-LIFETIME notifications sent to the initiator. If an initiator requests an IKE
lifetime that is greater than the responder, a notification will be sent and the initiator should
reduce its lifetime value accordingly.
Retain phase 1 SA after failed phase 2 negotiation
The name of a X.509 certificate file holding the router’s private part of the public/private key pair
in certificate exchanges. See X.509 Certificates for further explanation.
RSA private key file
The name of a X.509 certificate file holding the router’s private part of the public/private key pair
in certificate exchanges. See X.509 Certificates for further explanation.