B&B Electronics SPECTRE, Руководство по настройке

Страница: 45 / 90

B&B Electronics, Inc. SPECTRE Configuration Manual
45
710-10001-02 Rev. 3.0
www.bb-elec.com
www.bb-europe.com
Item Description
Description Description of tunnel.
Remote IP
Address IP address or domain name of the remote host.
Remote ID Identification of remote host. The ID contains two parts: a hostname
and a domain-name .
Remote Subnet Remote Subnet address
Remote Subnet
Mask Remote Subnet mask
Local ID Identification of local host. The ID contains two parts: a hostname and
a domain-name .
Local Subnet Local subnet address
Local subnet mask Local subnet mask
Key Lifetime
Lifetime key data part of tunnel. The minimum value of this parameter
is 60s. The maximum value is 86400 s.
IKE Lifetime Lifetime key service part of tunnel. The minimum value of this
parameter is 60s. The maximum value is 86400 s.
Rekey Margin Specifies the amount of time before the connection will be re-
established. The maximum value must be less than half of the
parameters IKE and Key Lifetime.
Rekey Fuzz Specifies the maximum percentage by which the Rekey Margin should
be randomly increased to randomize re-keying intervals
DPD Delay Defines time after which IPsec tunnel verification occurs
DPD Timeout Defines the timeout (in seconds) for a DPD response.
NAT traversal If address translation between two end points of the IPsec tunnel is
used, it needs to allow NAT Traversal
Aggressive mode If this parameter is enabled, the IPsec tunnel will be connected faster,
but encryption will set permanently on 3DES-MD5.
Authenticate Mode
Defines the authentication mode:

Pre-shared key - shared key for both sides.

X.509 Certificate -
Pre-shared Key Shared key for both sides of the tunnel
CA Certificate This certificate is necessary for Authentication mode x.509.
Remote Certificate This certificate is necessary for Authentication mode x.509.
Local Certificate This certificate is necessary for Authentication mode x.509.
Local Private Key This private key is necessary for Authentication mode x.509.
Local Passphrase This Local Passphrase is necessary for Authentication mode x.509.
Extra Options Use this parameter to define additional parameters of the IPsec
tunnel, for example security parameters etc.
Table 30: IPsec tunnel configuration
The certificates and private keys have to be in PEM format.