UTT Technologies
Chapter 10 VPN
http://www.uttglobal.com
Page
19719719
Figure 11-26 IPSec Settings (AutoKey (IKE) – Advanced Options (Aggressive Mode)
Advanced Options:
Click this hyperlink to view and configure advanced parameters.
In most cases, you need not configure them.
Exchange Mode:
It specifies the exchange mode used for IKE phase 1 negotiation.
The available options are
Main
and
Aggressive
. If the
Connection Type
is
Bidirectional
, you should choose
Main
mode; else, you should choose
Aggressive
mode.
SA Lifetime (Phase 1):
It refers to IKE SA lifetime, which specifies the number of
seconds (at least 600 seconds) an IKE SA will exist before expiring. A new IKE SA is
negotiated
60
seconds
before
the
existing
IKE
SA
expires.
