Digi TransPort WR31 User Manual page 454

Configure Virtual Private Networking (VPN)
Advanced IKEv2 Responder parameters
Stop IKE negotiation if no packet received for n seconds
The period of time, in seconds, after which the router will stop the IKEv2 negotiation when no
response to a negotiation packet has been received.
Enable NAT-Traversal
Enables support for NAT Traversal within IKE/IPsec. When one end of an IPsec tunnel is behind a
NAT box, some form of NAT traversal may be required before the IPsec tunnel can pass packets.
Turning NAT Traversal on enables the IKE protocol to discover whether or not one or both ends
of a tunnel is behind a NAT box, and implements a standard NAT traversal protocol if NAT is not
being performed.
The version of NAT traversal supported is that described in the IETF draft document draft-ietf-
ipsec-nat-t-ike-03.txt.
NAT traversal keep-alive interval n seconds
The interval, in seconds, in which the NAT Traversal keepalive packets are sent to a NAT device in
order to prevent NAT table entry from expiring.
RSA private key file
The name of a X.509 certificate file holding the router's private part of the public/private key pair
in certificate exchanges. See
Related CLI commands
Entity Instance
ike2 0
ike2 0
ike2 0
ike2 0
Digi TransPort WR Routers User Guide
X.509 Certificates
Parameter Values
inactto 0-255
natt on, off
natkaint Integer
privrsakey Filename
for further explanation.
Equivalent web parameter
Stop IKE negotiation if no packet received for n
seconds
Enable NAT-Traversal
NAT traversal keep-alive interval n seconds
RSA private key file
IPsec parameters
454