D-Link DIR-822 User Manual page 167

DIR-822 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh
Router
User Manual
Parameter
Mode
Allow traffic from
IPsec to router
Enable DPD
DPD delay
DPD timeout
TCP MSS
An operation mode of the IPsec tunnel. Select a value from the drop-
down list.
TUNNEL: As a rule, it is used to create a secure connection to
•
remote networks. In this mode, the source IP packet is fully
encrypted and added to a new IP packet and data transfer is
based on the header of the new IP packet.
TRANSPORT: As a rule, it is used to encrypt data stream
•
within one network. In this mode, only the content of the
source IP packet is encrypted, its header remains unchanged
and data transfer is based on the source header.
Move the switch to the left to deny access to your router from the
remote subnet via IPsec.
Move the switch to the right to enable using DPD protocol for this
tunnel. Such a setting allows to check the status of the remote host: if
encrypted packets exchange between the router and the remote host
breaks down, the router starts sending DPD messages to the remote
host. If the switch is moved to to the left, the DPD delay and DPD
timeout fields are not available for editing.
A time period (in seconds) between DPD messages. By default, the
value 30 is specified.
A waiting period for the response to a DPD message (in seconds). If
the host does not answer in the specified time, the router breaks down
the tunnel connection, updates information on it, and tries to
reestablish the connection. By default, the value 120 is specified.
Maximum Segment Size of a TCP packet. This parameter influences
the size of a TCP packet which will be sent from the remote host to the
router.
If the Manual value is selected, you can specify the value of this
parameter for each subnet of the tunnel in the MTU field. The field is
displayed in the window for adding a subnet in the Tunneled
Networks section.
If the Path MTU discovery value is selected, the parameter will be
configured automatically for all created subnets.
Page 167 of 213
Configuring via Web-based Interface
Description