Digi Connect IT Mini User Manual page 189

Virtual Private Networks (VPN)
7. The IPsec tunnel is enabled by default. To disable, click Enable.
8. (Optional) The Preferred tunnel option allows you to configure IPsec failover behavior. When
configuring a backup IPsec tunnel, for Preferred tunnel, select the primary IPsec tunnel. This
instructs the backup tunnel to only start when the primary tunnel is determined to have failed.
It will continue to operate until the preferred tunnel returns to full operational status.
When configuring the primary tunnel, and when configuring tunnels that will not fail over to a
backup tunnel, leave this option blank.
9. (Optional) Enable Force UDP encapsulation to force the tunnel to use UDP encapsulation even
when it does not detect that NAT is being used.
10. For Zone, select the firewall zone for the IPsec tunnel. Generally this should be left at the
default of IPsec.
11. Select the Mode, either:
Tunnel: The entire IP packet is encrypted and/or authenticated and then encapsulated
n
as the payload in a new IP packet.
Transport: Only the payload of the IP packet is encrypted and/or authenticated. The IP
n
header is unencrypted.
12. Select the Protocol, either:
ESP (Encapsulating Security Payload): Provides encryption as well as authentication and
n
integrity.
AH (Authentication Header): Provides authentication and integrity only.
n
Digi Connect IT® Mini User Guide
IPsec
189