M2M IDG500AM-0T001 User Manual page 195

M2M Cellular Gateway
Tunnel Configuration Window
Item Value setting
Unchecked by
Tunnel
default
1. A Must fill setting
Tunnel Name
2. String format can
be any text
1. A Must fill setting
2. WAN 1 is selected
Interface
by default
1. A Must fill setting
2. Site to site is
Tunnel Scenario
selected by default
1. An optional
setting
Hub and Spoke
2. None is set by
default
1. A Must fill setting
Operation Mode
2. Alway on is
selected by default
1. A Must fill setting
Encapsulation
2. ESP is selected by
Protocol
default
1. Unchecked by
default
Keep alive
2. 30s is set by
default
Index skipping is used to reserve slots for new function insertion, when required.
Description
Check the Enable box to activate the IPSec tunnel
Enter a tunnel name. Enter a name that is easy for you to identify.
Select WAN interface on which IPSec tunnel is to be established.
Select an IPSec tunneling scenario from the dropdown box for your application.
Select Site‐to‐Site, Site‐to‐Host, Host‐to‐Site, Host‐to‐Host, or Dynamic VPN.
With Site‐to‐Site or Site‐to‐Host or Host‐to‐Site, IPSec operates in tunnel mode. The
difference among them is the number of subnets. With Host‐to‐Host, IPSec
operates in transport mode.
Select from the dropdown box to setup your gateway for Hub‐and‐Spoke IPsec VPN
Deployments.
Select None if your deployments will not support Hub or Spoke encryption.
Select Hub for a Hub role in the IPSec design.
Select Spoke for a Spoke role in the IPSec design.
Note: Hub and Spoke are available only for Site‐to‐Site VPN tunneling specified in
Tunnel Scenario. It is not available for Dynamic VPN tunneling application.
There are three available operation modes. Always On, Failover, Load Balance.
Failover/ Always Define whether the IPSec tunnel is a failover tunnel function or an
Always on tunnel.
Note: If this IPSec is a failover tunneling, you will need to select a primary IPSec
tunnel from which to failover to.
Load Balance Define whether the IPSec tunnel connection will take part in load
balance function of the gateway. You will not need to select with WAN interface as
the system will automatically utilize the available WAN interfaces to balance traffic
loads. For more details on WAN Load Balance, refer to Load Balance Usage in this
manual. On gateway's web‐based utility, go to Basic Network > WAN > Load
Balance tab.
Note: Failover and Load Balance functions are not available for Dynamic VPN
specified in Tunnel Scenario.
Select the Encapsulation Protocol from the dropdown box for this IPSec tunnel.
Available encapsulations are ESP and AH.
Check the Enable box to enable Keep alive function.
Select Ping IP to keep live and enter the IP address to ping.
Enter the ping time interval in seconds.
Note: Keep alive option is not available for Dynamic VPN specified in Tunnel
Scenario.
195