EBW-E100
Functions
63
12.3.8
Setting Up IPsec
IPsec (Internet Protocol Security) is a security protocol for the safe communication
via IP networks and can be used to set-up virtual private networks (VPN). Two
subnets can be connected together using two suitable routers (e.g. INSYS
MoRoS 2.1) via a secure tunnel. It is possible to configure up to 10 different
tunnels.
A tunnel can also be used as fall back tunnel for another active tunnel. The active
tunnel will always be started when establishing the WAN connection. If the
additional ICMP ping is not successful, the active tunnel will be closed and the fall
back tunnel will be started. If the connection check via ICMP ping fails for a fall
back tunnel, the fall back tunnel will be closed and the active tunnel will be started.
Configuration via web interface (menu "Dial-In"/"Dial-Out"/"LAN (ext)", page
"IPsec")
In order to use IPsec for a connection, check the checkbox "Activate
IPsec".
In order to display the current state of the IPsec tunnels, select the link
"IPsec current state".
In order to display the messages of the last connection, select the link
"Display log of last connection".
In order to configure NAT traversal, use the drop-down list "NAT-
Traversal" to select the desired option. If you select "activate" (default
setting), all ESP (Encapsulating Security Payload) packets are additionally
packed into a UDP packet and sent using the UDP port 4500, if a NAT
router is detected. If you select "force", this behaviour will be enforced
without checking for a NAT router (the remote terminal must also have
NAT traversal enabled in this case). If you select "deactivate", a UDP data
encapsulation will be prevented, what might lead to problems in
operation with a NAT router. This setting applies for all tunnels.
In order to configure the interval of the keep alive packets, which are
sent, if NAT traversal is used, enter the time in seconds into the field
"Keep alive interval". This can prevent that e.g. a stateful firewall blocks
the connection after an extended inactivity period.
In order to select the tunnel, whose settings are to be edited, select the
desired tunnel from the drop-down list "Tunnel name" and click on the
button "load to edit" then. If settings are made to the currently loaded
tunnel, these must be taken over before using the button "OK", before a
new tunnel is loaded to prevent that these settings get lost. Loading a
tunnel does not save settings that have been made!
In order to activate the loaded tunnel, select the option "active" in the
drop-down list "Activate tunnel".
In order to specify the loaded tunnel as fallback tunnel for an active
tunnel, select the option "Fallback for ..." in the drop-down list "Activate
tunnel".
