Vpn - Ipsec Policy And Connection Menus - GE MDS ORBIT MCR Technical Manual

Figure 3-173. VPN - IPsec Policy and Connection menus
Following additional parameters are available for configuration in IPsec policy and connection entries:

Connection Type – net-to-net or host-to-host.The net-to-net type signifies IPsec tunnel mode. The
host-to-host type signifies the IPsec transport mode.

Life Time – 15-1440. The time interval, in minutes, after which the IPsec security association
expires.

Failure Retry Interval – 1-255. The number of minutes to wait after repeated failed VPN
connections before retrying.

Periodic Retry Interval – 15-255. The periodic attestation time, in minutes. Used only in IMA
connections. See APPENDIX B – Integrity Measurement Authority (IMA).

Inbound Firewall Filter – Apply an existing packet filter to the incoming traffic on this connection.
See section 3.8.8 Access Control List (Packet Filtering / Firewall) for more information. An inbound
filter to the connection must be applied, or no traffic will pass. If a filter hasn't been created
specifically for the VPN connection, use the preconfigured filter IN_TRUSTED, which allows all
inbound traffic.

Outbound Firewall Filter – Apply an existing packet filter to the outgoing traffic on this connection.
See section 3.8.8 Access Control List (Packet Filtering / Firewall) for more information. An outbound
filter to the connection must be applied, or no traffic will pass. If a filter hasn't been specifically
created for the VPN connection, use the preconfigured filter OUT_TRUSTED, which allows all
outbound traffic.

Static NAT – Apply an existing static Network Address Translation (NAT) rule set to the connection.
See 3.8.11 Static NAT for more information
NOTE
The VPN connections that are configured using the VPN service menu cannot be modified
using the VPN wizard.
Using the CLI
The CLI can also be used to configure VPN.
258 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F