Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION
95
Compressing the IP layer packet; When this option is
selected, this end will attempt to use IP data compression.
If the peer end also supports IP data compression, the IP
data compression will be enabled.
Key Exchange Mode
Key exchanging mode; You can select
Automatic
(both
parties automatically authenticate IDs and complete key
exchanging, and periodically update keys), or select
Manual
(all the key parameters are set and updated by
the user himself). The IKE negotiation mode is
recommended.
3. Negotiation property configuration
IPSec Automatic
(negotiation connection configuration)
IKE Mode
Negotiation mode;
Main Mode
(recommended mode)
and
Aggressive Mode
are optional.
Life Time in Seconds (1-28800)
Life time of security negotiation parameter; to ensure
data transmission security, such key parameters
generated by negotiation as key will be automatically
stopped in a period, and parameters are also
renegotiated automatically. The recommended value is
8 (hour).
Rekey Margin (1-540)
The advance time margin for renegotiation; To prevent
key renegotiation from interrupting normal data
transmission, it is allowed to renegotiate with the peer
party about key before the key expires. The
recommended value is 9 (s).
Rekey Fuzz Percent (1-200)
The maximum percentage of advance time margin for
renegotiation; the total advance time
≤
Rekey Fuzz
Percent *Rekey Margin
