Advantech WISE-6610 Series User Manual page 48

Item
Description
Host IP Mode
Remote IP Address
Tunnel IP Mode
Remote ID
Remote Subnet
Remote Subnet
Mask
Remote Protocol/
Port
Local ID
Local Subnet
First Local Subnet
Mask
Local Protocol/Port
Encapsulation Mode Specifies the mode, according to the method of encapsulation. You
Force NAT Traversal Enable/disables NAT address translation on the tunnel. Enable if you
IKE Protocol
IKE Mode
IKE Algorithm
IKE Encryption
IKE Hash
WISE-6610 Series User Manual
Description
Name or description of the tunnel.

IPv4 - The device communicates via IPv4 with the opposite side
of the tunnel.

IPv6 - The device communicates via IPv4 with the opposite side
of the tunnel.
IPv4, IPv6 address or domain name of the remote side of the tunnel,
based in the Host IP Mode above.

IPv4 - The IPv4 communication runs inside the tunnel.

IPv6 - The IPv6 communication runs inside the tunnel.
Identifier (ID) of remote side of the tunnel. It consists of two parts: a
hostname and a domain-name.
IPv4 or IPv6 address of a network behind remote side of the tunnel,
based on Tunnel IP Mode above.
IPv4 subnet mask of a network behind remote side of the tunnel, or
IPv6 prefix (single number 0 to 128).
Specifies Protocol/Port of remote side of the tunnel. The general form
is protocol /port, for example 17/1701 for UDP (protocol 17) and port
1701. It is also possible to enter only the number of protocol, however,
the above mentioned format is preferred.
Identifier (ID) of local side of the tunnel. It consists of two parts: a
hostname and a domain-name.
IPv4 or IPv6 address of a local network, based on Tunnel IP Mode
above.
IPv4 subnet mask of a local network, or IPv6 prefix (single number 0
to 128).
Specifies Protocol/Port of a local network. The general form is
protocol /port, for example 17/1701 for UDP (protocol 17) and port
1701. It is also possible to enter only the number of protocol, however,
the above mentioned format is preferred.
can select the tunnel mode in which the entire IP datagram is
encapsulated or the transport mode in which only IP header is
encapsulated.
use NAT between the end points of the tunnel.
Click the drop-down menu to select to define a protocol (IKEv1/IKEv2,
IKEv1, or IKEv2). IKE Phase 1 is ISAKMP (Internet Security
Association and Key Management Protocol), which is used to create
private tunnelling between peers for a secure communication.
Specifies the mode for establishing a connection (main or
aggressive). If you select the aggressive mode, then the device
establishes the tunnel faster, but the encryption is permanently set to
3DES-MD5. We recommend that you not use the aggressive mode
due to lower security!
Specifies the means by which the device selects the algorithm:

auto - The encryption and hash algorithm are selected
automatically.

manual - The encryption and hash algorithm are defined by the
user.
Encryption algorithm - 3DES, AES128, AES192, AES256.
Hash algorithm - MD5, SHA1, SHA256, SHA384 or SHA512.
37