Digi TransPort WR11 User Manual page 514

Configuring Virtual Private Networking (VPN)
The IKEv2 Responder page displays the various parameters for IKEv2 0 when in Responder
mode.
2. Configure the IKEv2 Responder parameters as needed:
Enable IKEv2 Responder
Allows the router to respond to incoming IKE requests.
Accept IKEv2 Requests with
The settings that the router will accept during the negotiation
Encryption
The acceptable encryption algorithms.
Authentication
The acceptable authentication algorithms.
PRF Algorithm
The acceptable PRF (Pseudo Random Function) algorithms.
MODP Group between x and y
The acceptable range for MODP group.
Renegotiate after h hrs m mins s secs
How long the initial IKE Security Association will stay in force. When it expires any attempt to
send packets to the remote system will result in IKE attempting to establish a new SA.
Rekey after h hrs m mins s secs
When the time left until expiry for this SA reaches the value specified by this parameter, the
IKEv2 SA will be renegotiated, such as a new IKEv2 SA is negotiated and the old SA is removed.
Any IPSec child SAs that were created are retained and become children of the new SA.
3. Click Apply.
Digi TransPort® Routers User Guide
Configure Internet Protocol security (IPsec)
514