Field
Description
The function is enabled by default.
Sync SAs with ISP inter-
face state
Select whether all SAs are to be deleted whose data traffic was
routed via an interface on which the status has changed from
Up
to
Down
,
Dormant
or
Blocked
.
The function is activated with
Enabled
.
The function is disabled by default.
Use Zero Cookies
Select whether zeroed ISAKMP Cookies are to be sent.
These are equivalent to the SPI (Security Parameter Index) in
IKE proposals; as they are redundant, they are normally set to
the value of the negotiation currently in progress. Alternatively,
your device can use zeroes for all values of the cookie. In this
case choose
Enabled
.
Zero Cookie Size
Only if Use Zero Cookies = activated.
Enter the length in bytes of the zeroed SPI used in IKE propos-
als.
The default value is
32
.
Dynamic RADIUS Au-
thentication
Select whether RADIUS authentication is to be activated via
IPSec.
The function is activated with
Enabled
.
The function is disabled by default.
Fields in the Advanced Settings PKI Editing Options menu
Field
Description
Ignore Certificate Re-
quest Payloads
Select whether certificate requests received from the remote
end during IKE (phase 1) are to be ignored.
The function is activated with
Enabled
.
The function is disabled by default.
Send Certificate Re-
quest Payloads
Select whether certificate requests are to be sent during IKE
(phase 1).
Funkwerk Enterprise Communications GmbH
11 VPN
bintec R1xxx/R3xxx/R4xxx
337