QNO VPN QoS, Руководство пользователя

Страница: 156 / 210

V
V
P
P
N
N
Q
Q
o
o
S
S
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
R
R
o
o
u
u
t
t
e
e
r
r
155
Advanced Setting- for IKE Protocol Only
The advanced settings include Main Mode and Aggressive mode. For the Main mode, the default setting
is set to VPN operation mode. The connection is the same to most of the VPN devices.
● Aggressive Mode: This mode is mostly adopted by remote devices. The IP connection is
designed to enhance the security control if dynamic IP is used for connection.
● Use IP Header Compression Protocol: If this option is selected, in the connected VPN tunnel,
the device supports IP Payload Compression Protocol.
● Keep Alive: If this option is selected, VPN tunnel will keep this VPN connection. This is mostly
used to connect the remote node of the branch office and headquarter or used for the remote
dynamic IP address.
● AH hash calculation: For AH (Authentication Header), users may select MD5/DSHA-1.
● NetBIOS Broadcast: If this option is selected, the connected VPN tunnel allows the passage of
NetBIOS broadcast packet. This facilitates the easy connection with other Microsoft network;
however, the traffic using this VPN tunnel will increase.
● Dead Peer Detection (DPD): If this option is selected, the connected VPN tunnel will regularly
transmit HELLO/ACK message packet to detect whether there is connection between the two
ends of the VPN tunnel. If one end is disconnected, the device will disconnect the tunnel
automatically and then create new connection. Users can define the transmission time for each
DPD message packet, and the default value is 10 seconds