Siemens SIMATIC NET SCALANCE S615 Configuration Manual page 289

● Authentication
Specify the method for calculating the checksum. Can only be selected if "Default Ciphers"
is disabled.
The following methods are supported:
– MD5
– SHA1
– SHA512
– SHA256
– SHA384
● Key derivation
Select the required Diffie-Hellmann group (DH) from which a key will be generated. Can only
be selected if "Default Ciphers" is disabled.
The following DH groups are supported:
– DH group 1
– DH group 2
– DH group 5
– DH group 14
– DH group 15
– DH group 16
– DH group 17
– DH group 18
● Keying Tries
Enter the number of repetitions for a failed connection establishment. If you enter the value
0, the connection establishment will be attempted endlessly.
● Lifetime [min]
Enter a period in minutes to specify the lifetime of the authentication. When the time has
elapsed, the VPN endpoints involved must authenticate themselves with each other again
and generate a new key
● DPD
When enabled, DPD (Dead Peer Detection) is used. Using DPD, it is possible to find out
whether the VPN connection still exists or whether it has aborted.
Note
Sending DPD queries increases the amount of data sent and received. This can lead to
increased costs.
● DPD Period [sec]
Enter the period after which DPD requests are sent. These queries test whether or not the
remote station is still available
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08
Configuring with Web Based Management
4.9 "Security" menu
289