Draytek Vigor3900 User Manual page 358

VoIPon www.voipon.co.uk sales@voipon.co.uk Tel: (0)330 088 0195 Fax: +44 (0)1245 808299
Available parameters are listed as follows:
Item Description
Phase 1 Key Life The rekey-renegotiated period of the IKE Phase1 keying
Time channel of a connection. The acceptable range is from 5 to
480 minutes (8 hours).
The rekey-renegotiated period of the IKE Phase 2 keying
Phase 2 Key Life
Time
channel of a connection. The acceptable range is from 5 to
480 minutes (8 hours).
Perfect Forward Enables the PFS function. A new Diffie-Hellman Key
Secrecy Status Exchange is included every time an encryption and/or
authentication key are computed on PFS.
Enable – Click it to enable DPD. When there is no traffic
Dead Peer
Detection Status through the IPSec tunnel, both server and the client will
send the DPD packet to each other to ensure the IPSec
tunnel connection is active still.
Disable – Click it to disable DPD.
DPD Delay The keep-alive timer. A Hello message will be emitted
periodically when a tunnel is idle. Use the value 0 to disable
this function. The recommended value is 30 seconds if
enabled.
DPD Timeout The timeout timer. The peer will be declared dead once no
acknowledge message is received after timeout value. Use
the value 0 to disable this function. The recommended value
is 120 seconds if enabled.
Ping to Keep Alive Enable – Click it to enable such function.
Ping to the IP - If you enable the PING function, please
specify the IP address for the system to PING it for keeping
alive.
If the remote network only allows you to dial in with single
Route/NAT Mode
IP, please choose this mode, otherwise please choose Route
350 Vigor3900 Series User's Guide