Digi Connect EZ Mini User Manual page 148

Virtual Private Networks (VPN)
n
19. (Optional) You can also configure various IPsec related time out, keep alive, and related values:
a. Change to the root of the configuration schema:
(config vpn ipsec tunnel ipsec_example policy 0)> ...
(config)>
b. Use the ? to determine available options:
(config)> vpn ipsec advanced ?
Advanced: Advanced configuration that applies to all IPsec tunnels.
Parameters
---------------------------------------------------------------------
---------
debug
ike_fragment_size
ike_retransmit_tries
keep_alive
Additional Configuration
---------------------------------------------------------------------
----------
connection_retry_timeout
connection_try_interval
ike_timeout
(config)>
Generally, the default settings for these should be sufficient.
c. You can also enable debugging for IPsec:
(config)> vpn ipsec advanced debug value
(config)>
where value is one of:
n
n
n
n
n
n
Digi Connect EZ Mini User Guide
other: Matches an unlisted protocol.
If other is used, set the number of the protocol:
(config vpn ipsec tunnel ipsec_example policy 0)> remote
protocol_other int
(config vpn ipsec tunnel ipsec_example policy 0)>
Allowed values are an integer between 1 and 255.
none
basic_auditing
detailed_control
generic_control
raw_data
sensitive_data
Current Value
none Debug level
1280 Maximum IKE fragment size
5 IKE retransmit tries
40s NAT keep alive time
Connection retry timeout
Connection try interval
IKE timeout
IPsec
148