Digi TransPort WR31 User Manual page 445

Configure Virtual Private Networking (VPN)
SA Removal Mode
Determines how IPsec and IKE SAs are removed.
Normal operation will not delete the IKE SA when all the IPsec SAs that were created by it are
•
removed and will not remove IPsec SAs when the IKE SA that created them is deleted.
Remove IKE SA when last IPSec SA removed deletes the IKE SA when all the IPsec SAs that
•
it created to a particular peer are removed.
Remove IPSec SAs when IKE SA removed deletes all IPSec SAs that have been created by
•
the IKE SA that has been removed.
Both removes IPSec SAs when their IKE SA is deleted, and delete IKE SAs when their IPSec
•
SAs are removed.
Delete SAs when invalid SPI notifications are received
Deletes IKE SAs when the router receives invalid SPI notifications.
Related CLI commands
Entity Instance
ike 0
ike 0
ike 0
ike 0
ike 0
ike 0
ike 0
Digi TransPort WR Routers User Guide
Parameter Values
inactto 0-255
natt on, off
initialcontact on, off
respltime on, off
keepph1 on, off
privrsakey Filename
delmode 0=Normal
1=Remove IKE SA when last
IPsec SA removed
2=Remove IPsec SAs when
IKE SA remove
3=Both
IPsec parameters
Equivalent web parameter
Stop IKE negotiation if no packet
received for n seconds
Enable NAT-Traversal
Send INITIAL-CONTACT notifications
Send RESPONDER-LIFETIME
notifications
Retain phase 1 SA after failed phase 2
negotiation
RSA private key file
SA Removal Mode
445