Funkwerk R1202 Reference Manual page 356

18 VPN
342
Field
Send Initial Contact
Message
Sync SAs with ISP in-
terface state
Use Zero Cookies
Zero Cookie Size
Dynamic RADIUS Au-
thentication
Fields in the PKI Handling Options menu
Field
Ignore Certificate Re-
quest Payloads
Funkwerk Enterprise Communications GmbH
Description
Select whether IKE Initial Contact messages are to be sent dur-
ing IKE (phase 1) if no SAs with a peer exist.
The function is enabled with
The function is enabled by default.
Select whether all SAs are to be deleted whose data traffic was
routed via an interface on which the status has changed from
to , or
The function is enabled with
The function is disabled by default.
Select whether zeroed ISAKMP Cookies are to be sent.
These are equivalent to the SPI (Security Parameter Index) in
IKE proposals; as they are redundant, they are normally set to
the value of the negotiation currently in progress. Alternatively,
your device can use zeroes for all values of the cookie. In this
case, select .
Only for Use Zero Cookies = enabled.
Enter the length in bytes of the zeroed SPI used in IKE propos-
als.
The default value is .
Select whether RADIUS authentication is to be activated via
IPSec.
The function is enabled with
The function is disabled by default.
Description
Select whether certificate requests received from the remote
end during IKE (phase 1) are to be ignored.
The function is enabled with
.
.
.
.
.
bintec Rxxx2/RTxxx2