D-Link DIR-816L User Manual page 187

DIR-816L Wireless AC750 Dual Band Router & Access Point
with 3G/CDMA/LTE Support and USB Port
User Manual
Parameter
Dead Peer Detection
maximum fail
TCP MSS
TCP MSS Value
Allow traffic between
tunneled networks
First phase
encryption algorithm
Hashing algorithm
First phase DHgroup
type
IKE-SA lifetime
Second phase
encryption algorithm
Authentication
algorithm
A number of DPD messages that were sent to check the status of a
remote host and left unanswered. By default, the value 3 is specified.
If a remote host does not answer the specified number of messages,
the router breaks down the tunnel connection, removes the encryption
keys, and tries to activate the connection.
Maximum Segment Size of a TCP packet. This parameter influences
the size of a TCP packet which will be sent from a remote host to the
router.
If the Manual value is selected, you can specify the parameter in the
TCP MSS Value field.
If the Path MTU Discovery value is selected, the parameter will be
configured automatically.
The maximum size (in bites) of a non-fragmented packet. The field is
available for editing when the Manual value is selected from the TCP
MSS drop-down list.
Select the checkbox to allow data exchange between subnets with
which IPsec tunnels have been created.
The first phase
Select encryption algorithm from the drop-down list.
Select hashing algorithm from the drop-down list.
A Diffie-Hellman key group for Phase 1. Select a value from the drop-
down list.
The lifetime of IKE-SA keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should exceed the value specified in the IPsec-SA lifetime field.
Specify 0 if you don't want to limit the lifetime of the keys.
The second phase
Select encryption algorithm from the drop-down list.
Select authentication algorithm from the drop-down list.
Page 187 of 304
Configuring Device (Router Mode)
Description