Troubleshooting
•
User data packets are dropped until the IPsec connection is established. ICMP "admin pro-
hibited" packets are sent back to the source address. The ping response is "Packet filtered".
•
There is only one instance of the SA under normal conditions. When the key exchange is in
process, two instances may exist at the same moment. The connection can be duplicated
in certain circumstances. It should not cause any problems for user traffic. On the other hand,
it consumes system resources and increases network load.
•
When the "SA lifetime" expires and the connection is broken, the "Diffie-Hellman group" is
probably set up incorrectly.
■
Buttons
Apply
- applies and saves the changes.
Cancel
- restores original values.
Refresh status
- refresh the status - see above
RipEX Radio modem & Router – © RACOM s.r.o.
172
Advanced Configuration
Summary of Contents for RipEX
Page 2: ......