Digi TransPort WR31 User Manual page 417

Configure Virtual Private Networking (VPN)
Interface
Use the IP address of the interface over which the IKE packets will be transmitted.
Secondary IP address
Use the IP address configured in the Secondary IP address parameter on the
Configuration > Network > Advanced Network Settings page.
Interface x,y
Use the IP address of the specified interface.
Tunnel this IPsec tunnel inside another IPsec tunnel
It is possible to tunnel packets from an IPsec tunnel within a second (or more) tunnel. When this
parameter is enabled.
NAT-Traversal Keepalive timer s seconds
Sets the interval period, in seconds, that the router will use to send regular packets to a NAT
device in order to prevent the NAT table entry from expiring.
Allow protocol IP protocol(s) in this tunnel
This restricts the type of IP packets that will be tunneled through the IPsec tunnel. The options
are:
All
•
TCP
•
UDP
•
GRE
•
IP packets with ToS values n must use this tunnel
Packets with matching ToS fields will only be tunneled through this IPsec tunnel and no others.
The usual traffic selector matching still takes place as normal. Packets that don't have matching
ToS values will get tunneled as normal. Enter the ToS values as a comma-separated list, such as
2,4.
Only tunnel IP packets with
Restricts the IP packets that will be tunneled to those with matching TCP/UDP port numbers.
local TCP/UDP port n
Allow IP packets with matching source TCP/UDP ports to be tunneled.
remote TCP/UDP port n
Allow IP packets with matching destination TCP/UDP ports to be tunneled.
Digi TransPort WR Routers User Guide
IPsec parameters
417