NetModule NetBox NB1310, User Manual

Page: 56 / 110

User Manual NetBox Wireless Routers 26-Apr-2012 56/110
Parameter Description
Remote server address: IP address or host name of IPsec peer / responder / server.
Remote LAN address: The remote private network. Provide an IP address in dotted decimal
notation
Remote LAN subnet mask: The remote private network. Provide a subnet mask in dotted deci-
mal notation.
NAT Traversal Enable or disable NAT-Traversal.
Preshared Key (PSK): The pre-shared key (PSK)
IKE mode: Choose a negotiation mode. The default is main mode (identity-
protection). Aggressive mode is less secure than main mode as it re-
veals your identity to an eavesdropper. However,
with pre-shared key
authentication and dynamic IP addresses aggressive mode is the only
choice.
IKE encryption: IKE encryption method
IKE hash: IKE hash method
IKE Diffie-Hellman Group: IKE Diffie-Hellman Group
Perfect Forward Secrecy (PFS): Use Perfect Forward Secrecy. This feature increases security as with
PFS, penetration of the key-exchange protocol does not compromise
keys negotiated earlier.
Local ID: Local ID
Remote ID: Remote ID
ESP encryption: ESP encryption method
ESP hash: ESP hash method
Status: Enable or disable Dead Peer Detection.
Detection cycle [sec]: Set the delay (in seconds) between Dead Peer Detection (RFC 3706)
keepalives (R_U_THERE, R_U_THERE_ACK) that are sent for this con-
nection (default
30
seconds).
Failure count: The number of unanswered DPD R_U_THERE requests until the IPsec
peer is considered dead (NetBox will try to reestablish a dead con-
nection automatically)