Digi TransPort WR11 User Manual page 512

Configuring Virtual Private Networking (VPN)
Rekey after h hrs m mins s secs
When the time left until expiry for this SA reaches the value specified by this parameter, the
IKEv2 SA will be renegotiated, such as a new IKEv2 SA is negotiated and the old SA is removed.
Any IPSec child SAs that were created are retained and become children of the new SA.
3. Click Apply.
Command line
Command Instance Parameter Values
ike2 n
ike2 n
ike2 n
ike n
ike2 n
ike2 n
ike2 n
ike2 n
Configure advanced IKEv2 n parameters
É
Web
1. Go to Configuration > Network > Virtual Private Networking (VPN) > IPsec > IKEv2 > IKEv2
n > Advanced.
2. Configure the IKEv2 advanced parameters as needed:
Retransmit a frame if no response after n seconds
The amount of time in seconds that IKEv2 will wait for a response from the remote unit before
transmitting the negotiation frame.
Digi TransPort® Routers User Guide
iencalg des, 3des, aes
ienkeybits 128, 192, 256
iauthalg md5, sha1, sha256
rauthalgs sha256
iprfalg md5, sha1
idhgroup 1, 2, 5
ltime 1-28800
rekeyltime 1-28800
Configure Internet Protocol security (IPsec)
Equivalent web parameter
Encryption
Encryption (AES Key length)
Authentication
PRF Algorithm
PRF Algorithm
MODP Group for Phase 1
Renegotiate after h hrs m mins s secs
This CLI value is entered in seconds only.
Rekey after h hrs m mins s secs
This CLI value is entered in seconds only.
512