User Manual of WNAP-6308
-58-
IPSec Key Life time
Lifetime settings determine when a new key is generated. Any time a key
lifetime is reached, the associated SA is also renegotiated. The process
of generating new keys at intervals is called dynamic rekeying or key
regeneration. Lifetimes allow you to force the generation of a new key
after a specific interval. For example, if the communication takes 12
hours and you specify the key lifetime as 1 hour, 12 keys will be
generated (one every 1 hour) during the exchange.
NAT Traversal
NAT Traversal
also known as UDP encapsulation allows traffic to get to
the specified destination when a device does not have a public address.
This is usually the case if your ISP is doing NAT, or the external interface
of your firewall is connected to a device that has NAT enabled.
Perfect Forward
Secrets
Select the checkbox to enable PFS (Perfect Forward Secrets).
IPSec Compression
Select the checkbox to enable compression of content on the connection.
IPSec Conn. Keep
Alive
When the firewall is located behind a NAT device, it sends keep alive
packets to maintain the connection. You can also force it to send keep
alive packets for all NAT-T connections.
IPSec Tunnel UP
This field indicates the IPSec Tunnel is UP and running.
5.5.1.5.
PPTP
If your ISP provides PPTP connection, please select
PPTP
. And enter the following parameters.
Figure 5-55
WAN – PPTP
