![background image](http://html1.mh-extra.com/html/racom/ripex/ripex_user-manual_3186409169.webp)
Default = On
Enables MOBIKE for IKEv2 supporting mobility or migration of the tunnels. Please note IKE is
moved from port 500 to port 4500 when MOBIKE is enabled. The peer configuration must match.
Dead Peer Detection
List box: On, Off
Default = On
Detection of lost connection with the peer. IKE test packets are sent periodically. When packets
are not acknowledged after several attempts, the connection is closed (corresponding actions
are initialized). In the case when Detection is not enabled, a connection loss is discovered when
regular key exchange process is initiated.
DPD check period [s]
Default = 30 sec. Range [5 - 28800] sec
Dead Peer Detection check period.
Dead Peer Detection
List box: Clear, Hold, Restart
Default = Hold
One of three connection states automatically activated when connection loss is detected:
•
Clear: Connection is closed and waiting
•
Hold: Connection is closed. Connection is established when first packet transmission
through tunnel is attempted
•
Restart: Connection is established immediately
Phase 1 - IKE
Parameters related to IKE SA (IKE Security Association) provide SA keys exchange with the
peer.
Authentication method
List box: PSK
Default = PSK
Peer authentication method. Peer configuration must match.
The "main mode" negotiation is the only option supported. The "aggressive mode" is not suppor-
ted; it is recognized as unsafe when combined with PSK type of authentication
Encryption algorithm
List box: 3DES (legacy), AES128, AES192, AES256
Default = AES128
IKE SA encryption algorithm. The "legacy" marked methods are recognized as unsafe. Peer
configuration must match.
Integrity algorithm
List box: MD5 (legacy), SHA1 (legacy), SHA256, SHA384, SHA512
Default = SHA256
IKE SA integrity algorithm. The "legacy" marked methods are recognized as unsafe. Peer con-
figuration must match.
The same value as selected for the Integrity algorithm, is used for the PRF (Pseudo-Random
Function).
Diffie-Hellman group (PFS)
List box: None (legacy), Group 2 (MODP1024, legacy), Group 5 (MODP1536, legacy), Group
14 (MODP2048), Group 15 (MODP3072)
Default = Group 15 (MODP3072)
169
© RACOM s.r.o. – RipEX Radio modem & Router
Advanced Configuration
Содержание RipEX
Страница 2: ......
Страница 42: ... DQ Data Quality Min 180 PER Packet Error Rate Max 5 RipEX Radio modem Router RACOM s r o 42 Network planning ...
Страница 222: ...Fig 10 3 ATEX Certificate RipEX 2 3 RipEX Radio modem Router RACOM s r o 222 Safety environment licensing ...
Страница 223: ...Fig 10 4 ATEX Certificate RipEX 3 3 223 RACOM s r o RipEX Radio modem Router Safety environment licensing ...