NEC ZA-SA3500G Function Manual page 204

Hide thumbs Also See for ZA-SA3500G:
Table of Contents

Advertisement

By setting Microsoft Azure (Route Based), the following fixed values can be set.
Although IPsec settings can be changed on the IPsec setting screen, it is recommended to use the settings as set on
the Cloud Service Setting screen. Note that if the setting on the IPsec setting screen is changed, cloud connection may
not be available. Also, if the service content on Microsoft Azure side changes, it may not be able to connect with the
content set on the Cloud Service Setting screen.
Setting Items
BGP4
KeepAlive/Hold timer setting
Maximum route acceptance setting
BGP peer: Multi-hop setting
IPsec
IPsec setting
IPsec function
IKE version
TCP/MSS adjustment
IKE_SA_INIT
Local ID specification
exchange
Remote ID
setting
specification
Encryption algorithm
Authentication
algorithm
PRF Algorithm
DH-Group choice
Lifetime
DPD-Keepalive
DPD-
KeepaliveTransmission
interval
IKE retransmission
interval
IKE retransmission
count
Negotiation direction
limitation
IKE_AUTH
Local traffic selector
exchange
Remote traffic
setting
selector
Encryption algorithm
Authentication
algorithm
204
Setting/Setting
Value
Hold timer 30 seconds, Keep Alive timer 10
seconds
Number of routes 4096, warning-only
specification
Number of hops 255
Use
IKEv2
Fixed 1350 bytes
Not specified
Not specified
AES256-CBC
HMAC-SHA1
HMAC-SHA1
1024 bit
10800 seconds
Use
10 seconds
Not specified
Not specified
both
Not set
Not set
AES256-CBC
HMAC-SHA1
Confirmation|
Remarks

Advertisement

Table of Contents
loading

Table of Contents