Digi TransPort WR31 User Manual page 440

Configure Virtual Private Networking (VPN)
Retain phase 1 SA after failed phase 2 negotiation
Normally IKE functionality is to remove the phase 1 SA if the phase 2 negotiation fails. Enabling
this parameter will cause the router to retain the existing phase 1 SA and retry the phase 2 again.
RSA private key file
The name of a X.509 certificate file holding the router's private part of the public/private key pair
in certificate exchanges. See
SA Removal Mode
Determines how IPsec and IKE SAs are removed.
Normal operation does not delete the IKE SA when all the IPsec SAs that were created by it
•
are removed and does not remove IPsec SAs when the IKE SA that created them is deleted.
Remove IKE SA when last IPSec SA removed deletes the IKE SA when all the IPsec SAs that
•
it created to a particular peer are removed.
Remove IPSec SAs when IKE SA removed deletes all IPSec SAs that have been created by
•
the IKE SA that has been removed.
Both removes IPSec SAs when their IKE SA is deleted, and deletes IKE SAs when their IPSec
•
SAs are removed.
Digi TransPort WR Routers User Guide
X.509 Certificates section for further explanation.
IPsec parameters
440