Digi IX14 User Manual page 532

Virtual Private Networks (VPN)
Tunnel and key renegotiating
n
The lifetime of the IPsec tunnel before it is renegotiated.
l
The amount of time before the IKE phase 1 lifetime expires.
l
The amount of time before the IKE phase 2 lifetime expires
l
The lifetime margin, a randomizing amount of time before the IPsec tunnel is renegotiated.
l
Note if the remote networks for an IPsec tunnel overlap with the networks for a WAN internet
connection (wired, cellular, or otherwise), you must configure a static route to direct the traffic either
through the IPsec tunnel, or through the WAN (outside of the IPsec tunnel). See
route for information about configuring a static route.

WebUI
1. Log into the IX14 WebUI as a user with full Admin access rights.
2. On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
3. Click VPN > IPsec.
4. Click to expand Tunnels.
5. For Add IPsec tunnel, type a name for the tunnel and click .
The new IPsec tunnel configuration is displayed.
IX14 User Guide
IPsec
Configure a static
532