User Manual/Web Interface MC-LR/MC-LR-4/MC-LRS/MC-LRS-4 – 01/2018 (FW 2.07.3)
21
IPsec Connection IKE
IPsec - Internet Key
Name of the VPN connection.
Exchange Settings
Phase 1 ISAKMP SA
ISAKMP SA Encryption
AES-128 (default). AES-192, AES-256, 3 DES.
ISAKMP SA Hash
The setting "all" accepts either MD5 or SHA-1.
ISAKMP SA Lifetime
Life cycle of a key in seconds (3600 = 1 hour).
Phase 2 IPsec SA
Unlike Phase 1 ISAKMP SA (key exchange,) this is where the procedure for
Data exchange
is
determined. It can differ from the key exchange procedure.
IPsec SA Encryption
AES-128 (default). AES-192, AES-256, 3 DES.
IPsec SA Hash
The setting "all" accepts either MD5 or SHA-1.
IPsec SA Lifetime
Life cycle in seconds for the key specified for IPsec SA.
28800 seconds = 8 hours (default).
86400 seconds = 24 hours (maximum).
Perfect Forward
Yes:
Perfect Forward Secrecy activated.
Secrecy (PFS)
No:
Perfect Forward Secrecy deactivated.
DH/PFS Group
Key exchange procedure (Diffie-Hellman groups for Internet Key Exchange (IKE)).
5/modp1536 = High encryption.
2/modp1024 = Normal encryption (default).
Rekey
Yes:
A new key will be brokered.
No:
No new key will be brokered.
Dead Peer Detection
Recognition of validity and resulting action in case of interruption of IPsec connection.
Yes:
Dead Peer Detection activated (i.e. Restart at VPN Initiate).
No:
No Dead Peer Detection.
DPD Delay
Time interval to next check.
DPD Timeout
Time period after which the connection to the remote peer should be declared inactive.
Default value:
120 seconds.
Maximum:
86400 seconds (24 hours).
