USR-G806 User Manual
Technical Support:
h.usriot.com
Jinan USR IOT Technology Limited
www.usriot.com
32
End terminal identifier:the channel end identifier, it can be IP or domain name. Note that when domain
name is customized, add @
Figure39
IPSEC advance setting
Start DPD detection: whether to enable this function, hook is indicated to enable.
DPD interval: set the time interval of connection detection (DPD).
DPD timeout time: set up the timeout time of connection detection (DPD).
DPD operation: sets the operation of connection detection.
IKE encryption: the first phase includes encryption, integrity and DH switching in the IKE stage.
IKE life cycle: set the life cycle of IKE, in seconds, default: 28800.
SA type: ESP and AH can be selected in the second stage.
ESP encryption: select the corresponding encryption mode and integrity scheme.
ESP life cycle: set ESP life cycle, unit: s, default: 3600
Mode: negotiation mode default main mode, aggrmode can be selected.
Session secret key forward encryption (PFS): if hook is activated, PFS will enable.
Authentication method: currently supports the pre shared key authentication method.
Note
After the configuration, the ISAKMP SA established flag in the connection log indicates that the IPSEC VPN
was created successfully.
