D-Link DFL-260E Reference Manual page 220

EnforceLocalID
GatewayCertificate
RootCertificates
XAuth
XAuthUsername
XAuthPassword
AddRouteToRemoteNet
PlaintextMTU
OriginatorIPType
OriginatorIP
OriginatorHAIP
TunnelMonitor
MonitoredIP
MaxLoss
IKEMode
IKEVersion
DHGroup
PFSDHGroup
SetupSAPer
Chapter 3: Configuration Reference
authenticated peers will be authorized. (Optional)
Enable if local identity must match any identity
proposed by the IKE peer. (Default: No)
Selects the certificate the firewall uses to
authenticate itself to the other IPsec peer.
Selects one or more root certificates to use with
this IPsec Tunnel.
Required for inbound or Pass to peer gateway.
(Default: Off )
Specifies the username to pass to the remote
gateway vie IKE XAuth.
Specifies the password to pass to the remote
gateway vie IKE XAuth.
Dynamically add route to the remote networks
when a tunnel is established. (Default: No)
Specifies the size in bytes at which to fragment
plaintext packets (rather than fragmenting IPsec).
(Default: 1420)
Specifies what IP address to use as source IP in e.g.
NAT. (Default: LocalInterface)
Manually specified originator IP address to use as
source IP in e.g. NAT.
Manually specified private originator IP address for
use in HA. (Optional)
Monitor a host inside the tunnel and renegotiatie
the tunnel if the host stops answering on ICMP
pings. (Default: No)
IP address of the host being monitored with ICMP
pings. Source address will be the OriginatorIP
configured for the tunnel interface.
Specifies how many consecutive ICMP pings must
be lost before the tunnel is renegotiated. (Default:
10)
Specifies which IKE mode to use: main or
aggressive. (Default: Main)
Specifies the IKE version to use for the tunnel.
(Default: 1)
Specifies the Diffie-Hellman group to use when
doing key exchanges in IKE. (Default: 2)
Specifies which Diffie-Hellman group to use with
PFS. (Default: None,1,2,5)
Setup security association per network, host or
port. (Default: Net)
220