Netopia 2200 series Software User's Manual page 324

Soft MBytes. Setting the Soft MBytes parameter forces the renegotiation of
the IPSec Security Associations (SAs) at the configured Soft MByte value.
The value can be configured between 1 and 1,000,000 MB and refers to data
traffic passed. If this value is not achieved, the Hard MBytes parameter is
enforced.
Soft Seconds. Setting the Soft Seconds parameter forces the renegotiation
of the IPSec Security Associations (SAs) at the configured Soft Seconds
value. The value can be configured between 60 and 1,000,000 seconds.
SPI . The Security Parameter Index is an identifier for the encryption and
authentication algorithm and key. The SPI indicates to the remote firewall
the algorithm and key being used to encrypt and authenticate a packet. It
should be a unique number greater than 255.
SSL. Secure Sockets Layer. A protocol developed by Netscape for transmit-
ting private documents via the Internet. SSL uses a cryptographic system
that uses two keys to encrypt data: a public key known to everyone and a
private or secret key known only to the recipient of the message.
STATEFUL. The Netopia Gateway monitors and maintains the state of any
network transaction. In terms of network request-and-reply, state consists of
the source IP address, destination IP address, communication ports, and
data sequence. The Netopia Gateway processes the stream of a network
conversation, rather than just individual packets. It verifies that packets are
sent from and received by the proper IP addresses along the proper commu-
nication ports in the correct order and that no imposter packets interrupt
the packet flow. Packet filtering monitors only the ports involved, while the
Netopia Gateway analyzes the continuous conversation stream, preventing
session hijacking and denial of service attacks.
static route. Route entered manually in a routing table.
subnet mask. A 32-bit address mask that identifies which bits of an IP
address represent network address information and which bits represent
node identifier information.
synchronous communication. Method of data communication requiring
the transmission of timing signals to keep peers synchronized in sending
and receiving blocks of data.
324