Motorola WiNG 5.4.2, Справочное руководство системы

Страница: 164 / 836

5 - 98 WiNG 5.4.2 Access Point System Reference Guide
Figure 5-58 Profile Security - Global VPN Settings tab
37. Refer to the following fields to define IPSec security, lifetime and authentication settings:
38. Define the following IKE Dead Peer Detection settings:
df bit Select the DF bit handling technique used for the ESP encapsulating header. Options
include
clear , set and copy . The default setting is copy.
IPsec Lifetime (kb) Set a connection volume lifetime (in kilobytes) for the duration of an IPSec VPN security
association. Once the set volume is exceeded, the association is timed out. Use the
spinner control to set the volume from 500 - 2,147,483,646 kilobytes. The default
settings is 4,608,000 kilobytes.
IPsec Lifetime (seconds) Set a lifetime (in seconds) for the duration of an IPSec VPN security association. Once
the set value is exceeded, the association is timed out. Options include
Seconds (120 -
86,400), Minutes (2 - 1,440), Hours (1 - 24) or Days (1). The default setting is 3,600
seconds.
Plain Text Density Set the type of Plain Text Density ACL. The available options are global and interface .
The default setting is global.
DPD Keep Alive Define the interval (or frequency) of IKE keep alive messages for dead peer detection.
Options include
Seconds (10 - 3,600), Minutes (1 - 60) and Hours (1). The default setting
is 30 seconds.