Digi Connect IT 4 User Manual page 310

Virtual Private Networks (VPN)
The management priority for the IPsec tunnel interface. The active interface with the highest
n
management priority will have its address reported as the preferred contact address for
central management and direct device access.
Enable XAUTH client authentication, and the username and password to be used to
n
authenticate with the remote peer.
Enable Mode-configuration (MODECFG) to receive configuration information, such as the
n
private IP address, from the remote peer.
Disable the padding of IKE packets. This should normally not be done except for compatibility
n
purposes.
Destination networks that require source NAT.
n
Depending on your network and firewall configuration, you may need to add a packet filtering
n
rule to allow incoming IPsec traffic.
Tunnel and key renegotiating
n
The lifetime of the IPsec tunnel before it is renegotiated.
l
The amount of time before the IKE phase 1 lifetime expires.
l
The amount of time before the IKE phase 2 lifetime expires
l
The lifetime margin, a randomizing amount of time before the IPsec tunnel is renegotiated.
l
Note if the remote networks for an IPsec tunnel overlap with the networks for a WAN internet
connection (wired, cellular, or otherwise), you must configure a static route to direct the traffic either
through the IPsec tunnel, or through the WAN (outside of the IPsec tunnel). See
route for information about configuring a static route.

Web
1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access
rights.
2. Access the device configuration:
Remote Manager:
a. Locate your device as described in
device.
b. Click the Device ID.
c. Click Settings.
d. Click to expand Config.
Local Web UI:
a. On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
Digi Connect IT® 4 User Guide
Use Digi Remote Manager to view and manage your
IPsec
Configure a static
310