Vpn - Motorola WiNG 5 System Reference Manual

13 - 120WiNG 5 Access Point System Reference Guide
Lease Time
Last Updated
Clear All
Refresh

13.3.20 VPN


Access Point Statistics
IPSec VPN provides a secure tunnel between two networked peer access points or controllers. Administrators can
define which packets are sent within the tunnel, and how they are protected. When a tunnelled peer sees a sensitive
packet, it creates a secure tunnel and sends the packet through the tunnel to its remote peer destination.
Tunnels are sets of security associations (SA) between two peers. SAs define the protocols and algorithms applied
to sensitive packets and specify the keying mechanisms used by tunnelled peers. SAs are unidirectional and exist in
both the inbound and outbound direction. SAs are established per the rules and conditions of defined security
protocols (AH or ESP).
Crypto maps combine the elements comprising IPSec SAs. Crypto maps also include transform sets. A transform set
is a combination of security protocols, algorithms and other settings applied to IPSec protected traffic. One crypto
map is utilized for each IPsec peer, however for remote VPN deployments one crypto map is used for all the remote
IPsec peers.
Internet Key Exchange (IKE) protocol is a key management protocol standard used in conjunction with IPSec. IKE
enhances IPSec by providing additional features, flexibility, and configuration simplicity for the IPSec standard. IKE
automatically negotiates IPSec SAs, and enables secure communications without time consuming manual
pre-configuration.
VPN statistics are partitioned into the following:
• IKESA
• IPSec
When a DHCP server allocates an address for a DHCP client, the client is
assigned a lease (which expires after a designated interval defined by the
administrator). The lease time is the time an IP address is reserved for
re-connection after its last use. Using very short leases, DHCP can
dynamically reconfigure networks in which there are more computers than
there are available IP addresses. This is useful, for example, in education and
customer environments where client users change frequently. Use longer
leases if there are fewer users.
Displays the time the server was last updated.
Select the Clear All button to clear the screen of its current status and begin
a new data collection.
Select the Refresh button to update the screen's statistics counters to their
latest values.