ETIC SIG, User Manual, Page: 25 / 83

CONFIGURATION
SIG Router & VPN server User’s guide ref. 9017409-01
Page 25
“Authentication & encryption key” parameters :
Authentication an encryption can be carried-out with a pre-shared key or a certificate.
“Pre-shared key” value :
The pre-shared key value applies to all the connections.
The maximum length of the key is 40 characters.
The same preshared key value will be used for remote users L2TP /
IPSec connections.
“
Certificate” value
The SIG router is delivered with a certificate stored into the product in
our factory.
To add a certificate, refer to the “Security” menu.
“Encryption and hash algorithm phase 1” & “Encryption and hash
algorithm phase 2” parameters :
That parameters allow to define the encryption and hash algorithms in use
during the phase 1 of the exchanges between the end-points (VPN set-
up) and during the phase 2 (data exchange).
The default value is Auto; in that case both end-points will negotiate a
common algorithm.
“DPD request period” parameters :
A DPD request (also called Keepalive message) is a message sent
periodically by each end-point to the other one to make sure that the VPN
must be left active.
This parameters sets the maximum amount of time (in seconds) between
two of these requests.
“Connection death time-out” parameters :
This parameter defines the maximum amount of time (in seconds) a VPN
connection will stay established if no traffic or no DPD request message
are received from the remote router.
ATTENTION : Once the parameters of the IPSEC connection have
been selected, click the OK button and then the Save button.