Cal Amp vanguard, Руководство пользователя

Страница: 50 / 69

49

Phase 2 Encryption
Use AES-128, AES-256 or 3DES encryption.

Phase 2 Authentication
Use MD5 or SHA1 hashing.

Phase 2 Lifetime
How long a particular instance of a connection should last, from successful negotiation to expiry.

Pre-shared Key:
Predetermined key known to both the local unit and the remote side prior to establishing the tunnel.

Negotiation Mode
Choose Normal to allow IPsec to negotiate some connection parameters. Choose Aggressive to require that only
those parameters selected above can be used to create the tunnel.

Perfect Forward Secrecy
Enable Perfect Forward Secrecy for the session keys.

Dead Peer Detection Delay
Tunnel keepalive time for R_U_THERE packets during idle periods.

Dead Peer Detection Timeout
Timeout time during tunnel idle periods where no R_U_THERE_ACK has been received.

Dead Peer Detection Action
Action to be taken when timeout value is reached.
Once you have completed the entry of the above fields, press the ADD/UPDATE button to save the new entry.
Tunnel Table

Enable
Check Ena to enable a tunnel. The tunnel’s state is saved across resets

View
Click on View to open a page showing the log of the tunnel’s negotiation activity

Delete
Click on Del to delete the tunnel
3.7.3 GRE
The GRE screen is used to add and delete GRE tunnels. Current tunnels are listed below. Static routes may be necessary to
route desired traffic through a particular tunnel.