Geneko GWR-I series, Руководство пользователя

Страница: 40 / 113

USER MANUAL GWR-I Cellular Router Series
40
IKE SA retry Number of IKE retries, before failover.
Enable tunnel failover
Enable tunnel failover. If there is more than one tunnel defined, this option will
failover to other tunnel in case that selected one fails to established connection.
Ping IP
IP address on other side of tunnel which will be pinged in order to determine
current state.
Ping interval Specify time period in seconds between two ping
Packet size Specify packet size for ping message
Advanced Ping Interval Time interval between advanced ping packets.
Advanced Ping Wait
For A Response
Advanced ping proofing timeout.
Maximum numbers of
failed packets
Set percentage of failed packets until failover action is performed.
Compress (IP Payload
Compression Protocol
(IP Comp))
IP Payload Compression is a protocol that reduces the size of IP datagram. Select
this option if you want the Router to propose compression when it initiates a
connection.
Dead Peer Detection
(DPD)
When DPD is enabled, the Router will send periodic HELLO/ACK messages to
check the status of the IPSec tunnel (this feature can be used only when both peers
or IPSec devices of the IPSec tunnel use the DPD mechanism). Once a dead peer
has been detected, the Router will disconnect the tunnel so the connection can be
re-established. Specify the interval between HELLO/ACK messages (how often
you want the messages to be sent). The default interval is 20 seconds.
NAT Traversal
Both the IPSec initiator and responder must support the mechanism for detecting
the NAT router in the path and changing to a new port, as defined in RFC 3947.
NOTE: If you select this mode the Aggressive mode will be automatically selected because
it is obligatory option for NAT-T to work properly.
NOTE: Keep-alive for NAT-T function is enabled by default and cannot be disabled. The
default interval for keep-alive packets is 20 seconds.
Send initial contact
The initial-contact status message may be used when one side wishes to inform
the other that this is the first SA being established with the remote system. The
receiver of this Notification Message might then elect to delete any existing SA's it
has for the sending system under the assumption that the sending system has
rebooted and no longer has access to the original SA's and their associated keying
material.
Back Click Back to return on IPSec Summary screen.
Reload Click Reload to discard any changes and reload previous settings.
Save
Click Save to save your changes back to the GWR-I Router. After that router
automatically goes back and begin negotiations of the tunnels by clicking on the
Start button.
Table 11 - IPSec Parameters for second firmware version