NETGEAR UTM5 Reference Manual page 280

ProSecure Unified Threat Management (UTM) Appliance
Table 67. Add IKE Policy screen settings (continued)
Setting Description
Authentication Method Select one of the following radio buttons to specify the authentication method:
•
•
Pre-shared key
Diffie-Hellman (DH) The DH Group sets the strength of the algorithm in bits. The higher the group, the
Group more secure the exchange. From the drop-down list, select one of the following
strengths:
•
•
•
•
•
•
Note:
SA-Lifetime (sec) The period in seconds for which the IKE SA is valid. When the period times out,
the next rekeying occurs. The default is 28800 seconds (8 hours).
Enable Dead Peer
Select a radio button to specify whether or not Dead Peer Detection (DPD) is
Detection enabled:
•
Note: See also
Configure Keep-Alives
and Dead Peer
Detection on
•
page 310.
Detection Period
Reconnect after
failure count
Virtual Private Networking Using IPSec Connections
Pre-shared key. A secret that is shared between the UTM and the remote
endpoint.
RSA-Signature. Uses the active self-signed certificate that you uploaded on
the Certificates screen (see
The pre-shared key is masked out when you select RSA-Signature.
A key with a minimum length of 8 characters and no more
than 49 characters. Do not use a double quote (") in the key.
Group 1 (768 bit).
Group 2 (1024 bit). This is the default setting.
Group 5 (1536 bit).
Group 14 (2048 bit).
Group 15 (3072 bit).
Group 16 (4096 bit).
Ensure that the DH Group is configured identically on both sides.
Yes. This feature is enabled. When the UTM detects an IKE connection
failure, it deletes the IPSec and IKE SA and forces a reestablishment of the
connection. You need to specify the detection period in the Detection Period
field and the maximum number of times that the UTM attempts to reconnect in
the Reconnect after failure count field.
No. This feature is disabled. This is the default setting.
The period in seconds between consecutive
DPD R-U-THERE messages, which are sent only when the
IPSec traffic is idle.
The maximum number of DPD failures before the UTM tears
down the connection and then attempts to reconnect to the
peer. The default is 3 failures.
280
Manage Self-Signed Certificates on page 400).