B+B SMARTWORK SmartMotion, Руководство по настройке

Страница: 83 / 144

4. CONFIGURATION
Continued from previous page
Item Description
Remote ID Identifier (ID) of remote side of the tunnel. It consists of two parts:
a
hostname and a domain-name .
Tunnel IP Mode
•
IPv4
– The IPv4 communication runs inside the tunnel.
• IPv6 – The IPv6 communication runs inside the tunnel.
Remote Subnet IPv4 or IPv6 address of a network behind remote side of the
tunnel, based on
Tunnel IP Mode above.
Remote Subnet Mask
/Prefix IPv4 subnet mask of a network behind remote side of the tunnel,
or IPv6 prefix (single number 0 to 128).
Remote Protocol/Port Specifies Protocol/Port of remote side of the tunnel. The general
form is
protocol / port , for example 17/1701 for UDP (protocol 17)
and port 1701. It is also possible to enter only the number of
protocol, however, the above mentioned format is preferred.
Local ID Identifier (ID) of local side of the tunnel. It consists of two parts:
a
hostname and a domain-name .
Local Subnet IPv4 or IPv6 address of a local network, based on Tunnel IP
Mode above.
Local Subnet Mask
/Prefix IPv4 subnet mask of a local network, or IPv6 prefix (single num-
ber 0 to 128).
Local Protocol/Port Specifies Protocol/Port of a local network. The general form is
protocol / port , for example 17/1701 for UDP (protocol 17) and
port 1701. It is also possible to enter only the number of protocol,
however, the above mentioned format is preferred.
Encapsulation Mode Specifies the IPsec mode, according to the method of encap-
sulation. You can select the
tunnel mode in which the entire IP
datagram is encapsulated or the
transport
mode in which only IP
header is encapsulated.
NAT traversal Enable/disables NAT address translation on the tunnel. Enable if
you use NAT between the end points of the tunnel.
IKE Mode Specifies the mode for establishing a connection ( main or ag-
gressive ). If you select the aggressive mode, then the router es-
tablishes the IPsec tunnel faster, but the encryption is perma-
nently set to 3DES-MD5.
We recommend that you not use the
aggressive mode due to lower security!
Continued on next page
73