Motorola AP-7131 Series, Справочное руководство

Страница: 206 / 954

5 - 120 WiNG 5.5 Access Point System Reference Guide
Figure 5-71 Profile Security - Global VPN Settings tab
41. Refer to the following fields to define IPSec security, lifetime and authentication settings:
42. Define the following IKE Dead Peer Detection settings:
df bit Select the DF bit handling technique used for the ESP encapsulating header. Options
include
clear , set and copy . The default setting is copy.
IPsec Lifetime (kb) Set a connection volume lifetime (in kilobytes) for the duration of an IPSec VPN security
association. Once the set volume is exceeded, the association is timed out. Use the
spinner control to set the volume from 500 - 2,147,483,646 kilobytes. The default
settings is 4,608,000 kilobytes.
IPsec Lifetime (seconds) Set a lifetime (in seconds) for the duration of an IPSec VPN security association. Once
the set value is exceeded, the association is timed out. Options include
Seconds (120 -
86,400), Minutes (2 - 1,440), Hours (1 - 24) or Days (1). The default setting is 3,600
seconds.
Plain Text Deny Select global or interface to set the scope of the ACL. The default setting is global,
expanding the rules of the ACL beyond just the interface.
DPD Keep Alive Define the interval (or frequency) of IKE keep alive messages for dead peer detection.
Options include
Seconds (10 - 3,600), Minutes (1 - 60) and Hours (1). The default setting
is 30 seconds.