NetModule NB3000-Line-Hd, Руководство пользователя

Страница: 114 / 225

NB3000-Line-Hd User Manual 4.2
Configuration
Figure 5.32.: IPsec Configuration
General
For setting up the tunnel you will have to configure the following parameters first:
Parameter IPsec General Settings
Remote peer IP address or host name of the remote IPsec peer. You may
specify 0.0.0.0 to act as a responder for roadwarrior clients.
DPD Status Specifies whether Dead Peer Detection (see RFC 3706) shall be
used. DPD will detect any broken IPSec connections, in par-
ticular the ISAKMP tunnel, and refresh the corresponding SAs
(Security Associations) and SPIs (Security Payload Identifier)
for a faster re-establishment of the tunnel.
Detection cycle The delay (in seconds) between DPD keepalives that are sent
for this connection (default 30 seconds)
Failure threshold The number of unanswered DPD requests until the IPsec peer
is considered dead (the router will then try to re-establish a
dead connection automatically)
105