Sierra Wireless AirLink RV50 Series User Manual page 432

ALEOS 4.9.0 Software Configuration User Guide for AirLink RV50 Series
Table D-6: VPN Commands
Command
*IPSEC1_IKE_DPD
*IPSEC2_IKE_DPD
*IPSEC3_IKE_DPD
*IPSEC4_IKE_DPD
*IPSEC5_IKE_DPD
*IPSEC1_IKE_DPD_INTERVAL
*IPSEC2_IKE_DPD_INTERVAL
*IPSEC3_IKE_DPD_INTERVAL
*IPSEC4_IKE_DPD_INTERVAL
*IPSEC5_IKE_DPD_INTERVAL
*IPSEC1_IKE_ENCRYPT
*IPSEC2_IKE_ENCRYPT
*IPSEC3_IKE_ENCRYPT
*IPSEC4_IKE_ENCRYPT
*IPSEC5_IKE_ENCRYPT
*IPSEC1_IKE_LIFETIME
*IPSEC2_IKE_LIFETIME
*IPSEC3_IKE_LIFETIME
*IPSEC4_IKE_LIFETIME
*IPSEC5_IKE_LIFETIME
*IPSEC1_LIFETIME
*IPSEC2_LIFETIME
*IPSEC3_LIFETIME
*IPSEC4_LIFETIME
*IPSEC5_LIFETIME
Rev 1 Dec. 17
Description
Query or set Dead Peer Detection (DPD).
AT*IPSEC[VPN number]_IKE_DPD? to query
AT*IPSEC[VPN number]_IKE_DPD=n to set
n=0—Disabled (default)
•
n=1—Enabled (When DPD is enabled, the AirLink gateway checks
•
to see if the server is still present if there has been no traffic for a
configured interval. If it does not receive an acknowledgment, it
retries at 5 second intervals. If there is no acknowledgment after 5
retries, the status of the VPN is set to Not Connected and the device
attempts to renegotiate IPSEC security parameters with its peer.)
Note: Sierra Wireless recommends that you Enable IKE DPD. Otherwise
the AirLink gateway has no way of detecting that the connection to the
VPN server is still available.
Query or set the DPD interval (in seconds). If there has been no traffic for
the period of time set in this field, the AirLink gateway retries checking
with the server, as described in
AT*IPSEC[VPN number]_IKE_DPD_INTERVAL? to query
AT*IPSEC[VPN number]_IKE_DPD_INTERVAL=n to set
n=0–3600 (default is 1200)
•
If n=0, DPD monitoring is turned off (disabled), but the AirLink
gateway still responds to DPD requests from the server.
Query or set the type/length of IKE encryption key used to encrypt/
decrypt ESP (Encapsulating Security Payload) packets for # VPN.
AT*IPSEC[VPN number]_IKE_ENCRYPT? to query
AT*IPSEC[VPN number]_IKE_ENCRYPT=n to set
n=1—DES
•
n=5—3DES
•
n=7—AES-128 (default)
•
n=9—AES-256
•
Note: 3DES supports 168-bit encryption. AES (Advanced Encryption
Standard) supports both 128-bit and 256-bit encryption.
Query or set how long the # VPN tunnel is active (in seconds).
AT*IPSEC[VPN number]_IKE_LIFETIME? to query
AT*IPSEC[VPN number]_IKE_LIFETIME=n to set
n=180–86400 (default is 7200)
•
Query or set how long the # VPN tunnel is active (in seconds).
AT*IPSEC[VPN number]_LIFETIME? to query
AT*IPSEC[VPN number]_LIFETIME=n to set
n=180–86400 (default is 7200)
•
432
*IPSEC[VPN Number]_IKE_DPD.
41111088