Draytek vigor2960 series User Manual page 331

4. After filling the required information for Basic, click the Advanced tab to open the
following page.
Available parameters are listed as follows:
Item
Phase 1 Key Life
Time
Phase 2 Key Life
Time
Perfect Forward
Secrecy Status
Dead Peer
Detection Status
DPD Delay
DPD Timeout
Ping to Keep Alive
Vigor2960 Series User's Guide
Description
The rekey-renegotiated period of the IKE Phase1 keying
channel of a connection. The acceptable range is from 5 to
480 minutes (8 hours).
The rekey-renegotiated period of the IKE Phase 2 keying
channel of a connection. The acceptable range is from 5 to
480 minutes (8 hours).
Enable the PFS function. A new Diffie-Hellman Key
Exchange is included every time an encryption and/or
authentication key are computed on PFS.
Enable or disable the DPD function.
The keep-alive timer. A Hello message will be emitted
periodically when a tunnel is idle. Use the value 0 to disable
this function. The recommended value is 30 seconds if
enabled.
The timeout timer. The peer will be declared dead once no
acknowledge message is received after timeout value. Use
the value 0 to disable this function. The recommended value
is 120 seconds.
Enable – Click it to enable such function.
Ping to the IP - If you enable the PING function, please
specify the IP address for the system to PING it for keeping
alive.
323