Digi TransPort WR11 User Manual page 508

Configuring Virtual Private Networking (VPN)
Send RESPONDER-LIFETIME notifications
Enables RESPONDER-LIFETIME notifications sent to the initiator. If an initiator requests an IKE
lifetime that is greater than the responder, a notification will be sent and the initiator should
reduce its lifetime value accordingly.
Retain phase 1 SA after failed phase 2 negotiation
The name of a X.509 certificate file holding the router's private part of the public/private key
pair in certificate exchanges. See
explanation.
RSA private key file
The name of a X.509 certificate file holding the router's private part of the public/private key
pair in certificate exchanges. See
explanation.
SA Removal Mode
Determines how IPsec and IKE SAs are removed.
Normal operation will not delete the IKE SA when all the IPsec SAs that were created by
n
it are removed and will not remove IPsec SAs when the IKE SA that created them is
deleted.
Remove IKE SA when last IPSec SA removed deletes the IKE SA when all the IPsec
n
SAs that it created to a particular peer are removed.
Remove IPSec SAs when IKE SA removed deletes all IPSec SAs that have been
n
created by the IKE SA that has been removed.
Both removes IPSec SAs when their IKE SA is deleted, and delete IKE SAs when their
n
IPSec SAs are removed.
Delete SAs when invalid SPI notifications are received
Deletes IKE SAs when the router receives invalid SPI notifications.
3. Click Apply.
Command line
Command Instance Parameter
ike 0
ike 0
ike 0
ike 0
ike 0
Digi TransPort® Routers User Guide
Use X.509 certificates with IPsec tunnels
Use X.509 certificates with IPsec tunnels
Values
inactto 0-255
natt on, off
initialcontact on, off
respltime on, off
keepph1 on, off
Configure Internet Protocol security (IPsec)
for further
for further
Equivalent web parameter
Stop IKE negotiation if no
packet received for n seconds
Enable NAT-Traversal
Send INITIAL-CONTACT
notifications
Send RESPONDER-LIFETIME
notifications
Retain phase 1 SA after failed
phase 2 negotiation
508