TP-Link TL-R600VPN Configuration Manual page 138

Configuring VPN
Local ID
Remote ID
Type
Remote ID
SA Lifetime
DPD
DPD Interval
 Configuring the IKE Phase-2 Parameters
Choose the menu VPN > IPSec > IPSec Policy and click Advanced Settings to load the
following page.
Figure 2-3 Configuring the IKE Phase-2 Parameters
In the Phase-2 Settings section, configure the IKE phase-2 parameters and click OK.
Encapsulation
Mode
Proposal
When the Local ID Type is configured as NAME, enter a name for the local device as
the ID in IKE negotiation.
Specify the remote ID type for IKE negotiation.
IP Address: Use an IP address as the ID in IKE negotiation. It is the default type.
NAME: Use a name as the ID in IKE negotiation. It refers to FQDN (Fully Qualified
Domain Name).
When the Remote ID Type is configured as NAME, enter a name of the remote peer as
the ID in IKE negotiation .
Specify ISAKMP SA (Security Association) Lifetime in IKE negotiation. If the SA lifetime
expired, the related ISAKMP SA will be deleted.
Check the box to enable or disable DPD (Dead Peer Detect) function. If enabled, the IKE
endpoint can send a DPD request to the peer to inspect whether the IKE peer is alive.
If DPD is triggered, specify the interval between sending DPD requests. If the IKE
endpoint receives a response from the peer during this interval, it considers the peer
alive. If the IKE endpoint does not receive a response during the interval, it considers
the peer dead and deletes the SA.
Specify the Encapsulation Mode as Tunnel Mode or Transport Mode. When both
ends of the tunnel are hosts, either mode can be chosen. When at least one of the
endpoints of a tunnel is a security gateway, such as a router or firewall, tunnel mode is
recommended to ensure safety.
Select the proposal for IKE negotiation phase 2 to specify the encryption algorithm,
authentication algorithm and protocol. Up to four proposals can be selected.
IPSec VPN Configuration
Configuration Guide 130