NB3000-Line-Hd User Manual 4.2
Configuration
Figure 5.32.: IPsec Configuration
General
For setting up the tunnel you will have to configure the following parameters first:
Parameter
IPsec General Settings
Remote peer
IP address or host name of the remote IPsec peer. You may
specify 0.0.0.0 to act as a responder for roadwarrior clients.
DPD Status
Specifies whether Dead Peer Detection (see RFC 3706) shall be
used. DPD will detect any broken IPSec connections, in par-
ticular the ISAKMP tunnel, and refresh the corresponding SAs
(Security Associations) and SPIs (Security Payload Identifier)
for a faster re-establishment of the tunnel.
Detection cycle
The delay (in seconds) between DPD keepalives that are sent
for this connection (default 30 seconds)
Failure threshold
The number of unanswered DPD requests until the IPsec peer
is considered dead (the router will then try to re-establish a
dead connection automatically)
105
