RACOM MG101, User Manual

Page: 42 / 107

User manual
42 / 107
GPRS/EDGE/UMTS routers MG101, MG102
3. Jul 2009
Parameter Description
Remote server address: IP address or host name of IPsec peer / responder / server.
Remote LAN address: The remote private network. Provide an IP address in dotted decimal
notation
Remote LAN subnet mask: The remote private network. Provide a subnet mask in dotted decimal
notation.
NAT Traversal Enable or disable NAT-Traversal.
Preshared Key (PSK): The pre-shared key (PSK)
IKE mode: Choose a negotiation mode. The default is main mode (identity-
protection). Aggressive mode is less secure than main mode as it re-
veals your identity to an eavesdropper. However, with pre-shared key
authentication and dynamic IP addresses aggressive mode is the only
choice.
IKE encryption: IKE encryption method
IKE hash: IKE hash method
IKE Diffie-Hellman Group: IKE Diffie-Hellman Group
Perfect Forward Secrecy (PFS): Use Perfect Forward Secrecy. This feature increases security as with
PFS, penetration of the key-exchange protocol does not compromise
keys negotiated earlier.
Local ID: Local ID
Remote ID: Remote ID
ESP encryption: ESP encryption method
ESP hash: ESP hash method
Status: Enable or disable Dead Peer Detection.
Detection cycle [sec]: Set the delay (in seconds) between Dead Peer Dectection (RFC 3706)
keepalives (R_U_THERE, R_U_THERE_ACK) that are sent for this
connection (default 30 seconds).
Failure count: The number of unanswered DPD R_U_THERE requests until the IPsec
peer is considered dead (MG101/102 will try to reestablish a dead con-
nection automatically)