46 MULTIMAX USER GUIDE
CA: Certification Authority.
XAUTH: Extended Authentication to AAA server.
Secrets
Enter the Pre-shared Key.
Null
Life Time @
IKE
Parameter
Set the lifetime in IKE negotiation.
Before an SA expires, IKE negotiates a new SA. As soon as the
new SA is set up, it takes effect immediately and the old one will
be cleared automatically when it expires.
86400
SA Algorithm
Select from “DES_MD5_96”, “DES_SHA1_96”, “3DES_MD5_96”,
“3DES_ SHA1_96”, “AES128_MD5_96”, “AES128_ SHA1_96”,
“AES192_MD5_96”, “AES192_ SHA1_96”, “AES256_MD5_96” and
“AES256_ SHA1_96” when you select “ESP” in “Protocol”;
Select from “AH_MD5_96” and “AH_ SHA1_96” when you select
“AH” in “Protocol”;
Note: Higher security means more complex implementation and
lower speed. DES is enough to meet general requirements. Use
3DES when high confidentiality and security are required.
3DES_MD5_96
PFS Group
Select from “PFS_NULL”, “MODP768_1”, “MODP1024_2” and
“MODP1536_5”.
PFS_NULL: Disable PFS Group
MODP768_1: Uses the 768-bit Diffie-Hellman group.
MODP1024_2: Uses the 1024-bit Diffie-Hellman group.
MODP1536_5: Uses the 1536-bit Diffie-Hellman group.
PFS_NULL
Life Time @
SA
Parameter
Set the IPsec SA lifetime.
Note: When negotiating to set up IPsec SAs, IKE uses the smaller
one between the lifetime set locally and the lifetime proposed by
the peer.
28800
DPD Time
Interval
Set the interval after which DPD is triggered if no IPsec protected
packets is received from the peer.
DPD: Dead peer detection. DPD irregularly detects dead IKE
peers. When the local end sends an IPsec packet, DPD checks
the time the last IPsec packet was received from the peer. If the
time exceeds the DPD interval, it sends a DPD hello to the peer. If
the local end receives no DPD acknowledgement within the DPD
packet retransmission interval, it retransmits the DPD hello. If the
local end still receives no DPD acknowledgement after having
made the maximum number of retransmission attempts, it
considers the peer already dead, and clears the IKE SA and the
IPsec SAs based on the IKE SA.
180
DPD Timeout Set the timeout of DPD packets.
60
VPN Over
IPsec Type
Select from “None”, “L2TP” and “GRE”.
L2TP Over IPsec: Encrypt theL2TP tunnels using IPsec.
GRE Over IPsec: Encrypt the GRE tunnels using IPsec.
None
Summary of Contents for MULTIMAX MA 2040
Page 1: ...Dual Port Dual SIM Industrial Cellular Router User Guide V1 01...
Page 44: ...MULTIMAX USER GUIDE 43...
Page 88: ...MULTIMAX USER GUIDE 87 The modification will take effect after Apply Save Reboot...
Page 90: ...MULTIMAX USER GUIDE 89 The modifications will take effect after click Apply Save Reboot...
