RACOM Midge MG102, Руководство по эксплуатации

Страница: 44 / 122

Description Parameter
IP address or host name of IPsec peer / responder / server.
Remote server
address:
The remote private network. Provide an IP address in dotted decimal notation. Remote LAN
address:
The remote private network. Provide a subnet mask in dotted decimal notation.
Remote LAN
subnet mask:
Enable or disable NAT-Traversal. NAT Traversal
The pre-shared key (PSK) Preshared Key
(PSK):
Choose a negotiation mode. The default is main mode (identity-protection). Ag-
gressive mode is less secure than main mode as it reveals your identity to an
IKE mode:
eavesdropper. However, with pre-shared key authentication and dynamic IP ad-
dresses aggressive mode is the only choice .
IKE encryption method IKE encryption:
IKE hash method IKE hash:
IKE Diffie-Hellman Group
IKE Diffie-Hell-
man Group:
Use Perfect Forward Secrecy. This feature increases security as with PFS, penet-
ration of the key-exchange protocol does not compromise keys negotiated earlier.
Perfect For-
ward Secrecy
(PFS):
Local ID Local ID:
Remote ID Remote ID:
ESP encryption method
ESP encryp-
tion:
ESP hash method ESP hash:
Enable or disable Dead Peer Detection. Status:
Set the delay (in seconds) between Dead Peer Dectection (RFC 3706) keepalives
(R_U_THERE, R_U_THERE_ACK) that are sent for this connection (default 30
seconds).
Detection cycle
[sec]:
The number of unanswered DPD R_U_THERE requests until the IPsec peer is
considered dead (M!DGE/MG102 will try to reestablish a dead connection automat-
ically)
Failure count:
MG102, M!DGE, GPRS/EDGE/UMTS routers – © RACOM s.r.o. 44
Configuration