SmartRG SR300n User Manual page 75

The individual fields on this screen are defined as follows:
Field Name
IPSec Connection Name
IP Version
Tunnel Mode
Local Gateway Interface
Remote IPSec Gateway Address
Tunnel Access From Local IP Addresses
Key Exchange Method
Authentication Method
Perfect forwarding Secrecy
If desired, use the Advanced IKE Settings
501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA l +1 360 859 1780
SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014
Description
A free form text field. Enter a descriptive name for this connection
[IPv4, IPv6] Select the IP version environment associated with your infrastructure.
[ESP, AH] Select encapsulation method to be used.
Use AH tunnel mode to encapsulate a packet with AH and IP headers. For authenti-
cation, the entire packet is signed.
Use ESP tunnel mode to encapsulate a packet with ESP and IP headers. An ESP
trailer is added to the packet for authentication and integrity.
Select the WAN connection from the drop-down list to be associated with this tunnel.
Enter the he WAN IP for tunnel.
[Subnet, Single Address] Select IP information for site A and B.
Subnet indicates entire LAN.
For single host, select Single Address.
[Manual, Auto(IKE)] The default of Auto(IKE) which uses the negotiated key-exchange
method for IPSec is recommended.
[Pre-Shared Key, Certificate (x.509)] Select the method by which the remote end will
authenticate.
[Enable, Disable] When enabled, this setting ensures that a session key derived from
a set of long-term keys will not be compromised if one of the long-term keys is com-
promised in the future.
area to select Phase 1 and Phase 2 specific parameters.
Page 75
smartrg.com