Traffic selectors
"Traffic selector" defines which traffic is forwarded to the IPsec tunnel. The rule that defines this
selection matches an incoming packet to "Local network" and "Remote network" address ranges.
Basic rules:
Each line contains the configuration settings of one CHILD SA and indicates its association
to a specific IKE SA
There can be a maximum of 16 active CHILD SA (in total over all Active IKE SA)
Every "Active" line must have an equivalent on the peer side with reversed "Local network"
and "Remote network" fields
"Local network" and "Remote network" fields must contain different address ranges and must
not interfere with the USB service connection (10.9.8.7/28) or internal connection to FPGA
(192.0.2.233/30)
Each "Active" Traffic selector in the configuration table must be unique
Configuration:
Local network
Source IP address and mask of the packets to be captured and forwarded to the encrypted
tunnel.
Remote network
Destination IP address and mask of the packets to be captured and forwarded to the encrypted
tunnel.
Note
You may add a note to each tunnel with your comments up to 16 characters (UTF8 is sup-
ported) for your convenience. Following characters are not allowed:
" (Double quote)
` (Grave accent)
\ (Backslash)
$ (Dollar symbol)
; (Semicolon)
Active
List box: On, Off
Default = On
Relevant CHILD SA can be enabled/disabled.
Start state
List box: Passive, On Demand, Start
Default = Passive
This parameter defines initial state of the IPsec connection.
•
Passive: Connection is not established. Waiting for the peer to initiate the connection
•
On Demand: Connection is established when first packet transmission through tunnel is at-
tempted; packet is waiting for the connection to be established
•
Start: Connection is established immediately
MOBIKE
List box: On, Off
RipEX Radio modem & Router – © RACOM s.r.o.
168
Advanced Configuration
Содержание RipEX
Страница 2: ......
Страница 42: ... DQ Data Quality Min 180 PER Packet Error Rate Max 5 RipEX Radio modem Router RACOM s r o 42 Network planning ...
Страница 222: ...Fig 10 3 ATEX Certificate RipEX 2 3 RipEX Radio modem Router RACOM s r o 222 Safety environment licensing ...
Страница 223: ...Fig 10 4 ATEX Certificate RipEX 3 3 223 RACOM s r o RipEX Radio modem Router Safety environment licensing ...