E-Lins H820QO Series, Руководство пользователя

Страница: 47 / 99

H820QO User Manual
E-Lins Technology Co.,Limited
Tel: +86-755-29230581 E-mail: sales@e-lins.com www.e-lins.com
visited from internet.

Local endpoint : domain name or IP address or interface name of this device.

Local IKE identifier:
Identity to use for the local device authentication.

Remote IKE identifier: Identity to use for the remote device authentication.

Preshared Keys : pre-shared key authentication. As known as PSK.

Perfect Forward Secrecy:
whether Perfect Forward Secrecy of keys is desired on the
connection's keying channel

DPD action: controls the use of the Dead Peer Detection protocol (DPD, RFC 3706)
where R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL
messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec
peer. The values clear, hold, and restart all activate DPD and determine the action to
perform on a timeout. With clear the connection is closed with no further actions taken.
hold installs a trap policy, which will catch matching traffic and tries to re-negotiate the
connection on demand. restart will immediately trigger an attempt to re-negotiate the
connection. The default is none which disables the active sending of DPD messages

DPD delay
: defines the period time interval with which R_U_THERE
messages/INFORMATIONAL exchanges are sent to the peer

DPD timeout : defines the timeout interval, after which all connections to a peer are
deleted in case of inactivity.

NAT Traversal : indicate device is behind a NAT device or not.

Local subnet : the subnet of local which connects to IPSEC VPN.

Remote subnet : the subnet of remote which connects to IPSEC VPN.

Local source ip : The internal source IP of local device to use in a tunnel, also known
as
Remote source ip : The internal source IP of remote device to use in a tunnel, also
known as