SIP-2
73/145
USER GUIDE - Rev. 3 (January 2018)
5.12
VPN CONFIGURATION
This menu only appears when the SIP-2 equipment has the optional wireless WAN
interface.
As already mentioned in the
Tunnel
submenu of the
WAN
menu (section 5.5.2), the
tunnels are a method for establishing the opportune end-to-end links between equipment.
Unlike the GRE and IPIP tunnels, IPSec tunnels are characterised by being safe; this
means the information is transmitted so that its content cannot be accessed by others,
which is particularly important if the IP network upon which it is established is not controlled
by the user, or is not public.
To create an IPSec tunnel a security association must be established in each terminator:
Tunnel IP (origin) and Remote GW (destination).
An IPSec connection between two ends requires three steps:
Establishing an IKE Security association (IKE Policy).
Establishing an IPSec Security association (IPSec Association).
Sending protected data through the IPSec connection.
The parameters used in each of these steps are configured as independent blocks, thereby
permitting their use in more than one tunnel at the same time and reducing the need to
duplicate configuring information.
The DPD (Dead Peer Detection) function is a mechanism for supervising operativity in the
IPSec tunnels established.
