Digi IX10 User Manual page 174

Virtual Private Networks (VPN)
c. For Type, select one of the following:
n
n
n
n
d. For Remote network, enter the IP address and optional netmask of the remote network.
The keyword any can also be used. .
21. Click to expand IKE.
a. For IKE version, select either IKEv1 or IKEv2. This setting must match the peer's IKE
version.
b. Initiate connection instructs the device to initiate the key exchange, rather than waiting
for an incoming request. This must be disabled if Remote endpoint >
any.
c. For Mode, select either Main mode or Aggressive mode.
d. For Enable padding, click to disable the padding of IKE packets. This should normally not
be disabled except for compatibility purposes.
e. For Phase 1 lifetime, enter the amount of time that the IKE security association expires
after a successful negotiation and must be re-authenticated.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the
format number{w|d|h|m|s}.
For example, to set Phase 1 lifetime to ten minutes, enter 10m or 600s.
f. For Phase 2 lifetime, enter the amount of time that the IKE security association expires
after a successful negotiation and must be rekeyed.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and take the
format number{w|d|h|m|s}.
For example, to set Phase 2 lifetime to ten minutes, enter 10m or 600s.
IX10 User Guide
Address: The address of a local network interface.
For Address, select the appropriate interface.
Network: The subnet of a local network interface.
For Address, select the appropriate interface.
Custom network: A user-defined network.
For Custom network, enter the IPv4 address and optional netmask. The keyword
any can also be used.
Request a network: Requests a network from the remote peer.
IPsec
Hostname is set to
174