Digi IX14 User Manual page 538

Virtual Private Networks (VPN)
e. For Port, type the port matching criteria.
Allowed values are a port number, a range of port numbers, or any.
f. (Optional) Click to expand Remote traffic selector.
g. For Remote network, enter the IP address and optional netmask of the remote network.
h. For Protocol, select one of the following:
n
n
n
n
n
i. For Port, type the port matching criteria.
Allowed values are a port number, a range of port numbers, or any.
21. Click to expand IKE.
a. For IKE version, select either IKEv1 or IKEv2. This setting must match the peer's IKE
version.
b. Initiate connection instructs the device to initiate the key exchange, rather than waiting
for an incoming request. This must be disabled if Remote endpoint >
any.
c. For Mode, select either Main mode or Aggressive mode.
d. For IKE fragmentation, select one of the following:
n
n
n
IX14 User Guide
Any: Matches any protocol.
TCP: Matches TCP protocol only.
UDP: Matches UDP protocol only.
ICMP: Matches ICMP requests only.
Other protocol: Matches an unlisted protocol.
If Other protocol is selected, type the number of the protocol.
If supported by the peer: Send oversized IKE messages in fragments, if the peer
supports receiving them.
Always: Always send IKEv1 messages in fragments. For IKEv2, this option is
equivalent to If supported by the peer.
Never: Do not send oversized IKE messages in fragments.
IPsec
Hostname is set to
538