Vpn > Ipsec - Multitech RouteFinder RF850 User Manual

IKE Life Time
The duration for which the ISAKMP SA should last is from successful negotiation to expiration. The
default value is 3600 seconds and the maximum is 28800 seconds.
Key Life
The duration for which the IPSec SA should last is from successful negotiation to expiration. The
default value is 28800 seconds and the maximum is 86400 seconds.
Number of Retries
Specify the number of retries for the IPSec tunnel. Enter zero for unlimited retries.
Left NextHop
Next Hop is the address of the next device in a routing table's path that moves a packet to it's
destination. Enter 0.0.0.0 to indicate that the device should use the routing table default.
Local WAN IP
Select the interface initiating the IPSec tunnel. Options available depend on whether or not Load
Balancing is enable/disable.
FailOver Required
Check the box to enable VPN failover for the tunnel. When this field is enabled, the tunnel will
"failover" onto the other interface if the local interface is down. For example, if the tunnel is
configured on WAN 1 but the link goes down, the tunnel again comes up on the other link (i.e., WAN
2). Failover is possible only when the remote gateway is an FQDN (Fully Qualified Domain Name).
Local LAN
Local security gateway for which the security services should be provided. If the RouteFinder acts
as a host, this should be configured as None.
Remote Gateway IP or FQDN
Interface where the IPSec tunnel ends. In the case of a Road Warrior with a Dynamic IP address,
this should be configured to ANY. FQDN is a DNS resolvable fully qualified domain name with
which identity the right peer can be identified. When FQDN is selected, the Remote Gateway IP
should be blank.
Remote LAN
Remote security gateway for which the security services should be provided. If the remote end is
the host, this should be configured as None.
UID (Unique Identifier String)
It is recommended that you accept the default to disable UID. UID is used only for compatibility
purposes (other IPSec VPN gateways might require you to input a Local and Remote IPSec
Identifier). Note:
Local ID
Enter the local security gateway ID, if required.
Remote ID
Enter the remote security gateway ID, if required.
NetBIOS Broadcast
Check this option to enable broadcasts over the connection. It will allow computers on the network
to share Microsoft file and printer sharing information.
Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E)
Local ID and Remote ID are active only when UID is enabled for the connection.
Chapter 6 – RouteFinder Software
VPN > IPSec > IKE
118