HoB HOBLink, Руководство администратора

Страница: 48 / 83

Configuring HOBLink VPN Gateway HOBLink VPN Gateway
48 Security Solutions by HOB
List of IKEv2 Schemes
A list of configured IKEv2 schemes is displayed here. The buttons below the list
have the following functions:
Use the arrow buttons to manage the order in which the IKEv2 schemes appear in
this list. The entry fields for the
List of IKEv2 Schemes interface are as follows:
Name – enter the name of the scheme you are adding to your network. This is a
required field.
Description – enter a description of the scheme to help identification and
management of the scheme.
Initiator identification type – select the identification type from the dropdown box.
The supported types are
IP address
(INETA) and
Name of that gateway
(Fully Qualified Distinguished Name - FQDN), which can be configured in Section
5.11 VPN on page 54 . Default is
IP address
.
Enable authentication retries – enable to allow the authentication process to be
repeated several times after a failed authentication. This is enabled by default.
Maximum allowed authentication retries – the maximum number of allowed
authentication retries. The value should be in the range of
1-5
, the default is
3
. This
field is only shown if Enable authentication retries is enabled.
EAP mode – EAP (Extensible Authentication Protocol) mode is used when a client
requests EAP authentication. The supported modes are
None
(this is the default
mode),
GTC
,
MD5
and
MSCHAPv2
.
Detect NAT device(s) – enable to allow the detection of NAT device(s). This is
enabled by default.
UDP timeout – enter the UDP timeout in seconds. The value should be between
1-600
,
10
is the default.
UDP retries – enter the number of UDP retries permitted. The value should be
between
0-20
,
2
is the default.
Enable dead Peer detection (DPD) – enable to allow the detection of dead or
unresponsive peers. This is enabled by default.
Enable DPD logging – enable to allow the logging of DPD . This is disabled by
default.
DPD inbound data timeout – the DPD data timeout in seconds. The value should
be in the range of
1-86400
, the default is
60
.
click New to create a new entry in the list of IKEv2 schemes. You will then
be prompted to enter a name as an identifier for the new scheme.
click
Clone to clone the selected scheme. The clone must be given a new
name to avoid future conflicts.
click
Remove to remove the selected scheme from the list.
The next 4 options are shown only if Dead Peer Detection has been
enabled.