Table of Contents
Advertisement
Virtual Private Networks (VPN)
i. Click to expand Phase 2 Proposals.
i. Click gto create a new phase 2 proposal.
ii. For Cipher, select the type of encryption.
iii. For Hash, select the type of hash to use to verify communication integrity.
iv. For Diffie-Hellman group, select the type of Diffie-Hellman group to use for key
exchange.
v. You can add additional Phase 2 proposals by clicking gnext to Add Phase 2 Proposal.
21. (Optional) Click to expand Dead peer detection. Dead peer detection is enabled by default.
Dead peer detection uses periodic IKE transmissions to the remote endpoint to detect
whether tunnel communications have failed, allowing the tunnel to be automatically restarted
when failure occurs.
a. To enable or disable dead peer detection, click Enable.
b. For Delay, type the number of seconds between transmissions of dead peer packets. Dead
peer packets are only sent when the tunnel is idle.
c. For Timeout, type the number of seconds to wait for a response from a dead peer packet
before assuming the tunnel has failed.
22. (Optional) Click to expand NAT to create a list of destination networks that require source NAT.
a. Click gnext to Add NAT destination.
b. For Destination network, type the IPv4 address and optional netmask of a destination
network that requires source NAT. You can also use any, meaning that any destination
network connected to the tunnel will use source NAT.
23. See
Configure SureLink active recovery for IPsec
24. Click Apply to save the configuration and apply the change.
Digi Connect IT® Mini User Guide
for information about IPsec Active recovery.
IPsec
194
Advertisement
Table of Contents
