D-Link NetDefend DFL-210 Cli Reference Manual page 137

3.30.5. IPsecTunnel
system.
Properties
Index
Name
LocalNetwork
RemoteNetwork
RemoteEndpoint
IKEConfigModePool
IKEAlgorithms
IPsecAlgorithms
IKELifeTimeSeconds
IPsecLifeTimeSeconds
IPsecLifeTimeKilobytes
EncapsulationMode
AuthMethod
PSK
LocalIDType
LocalIDValue
GatewayCertificate
RootCertificates
IDList
XAuth
XAuthUsername
The index of the object, starting at 1. (Identifier)
Specifies a symbolic name for the interface. (Identifier)
The network on "this side" of the IPsec tunnel. The IPsec tun-
nel will be established between this network and the remote
network.
The network connected to the remote gateway. The IPsec tun-
nel will be established between the local network and this net-
work.
Specifies the IP address of the remote endpoint. This is the
address the security gateway will establish the IPsec tunnel
to. It also dictates from where inbound IPsec tunnels are al-
lowed. (Optional)
Selects IKE Config Mode Pool to use for the tunnel.
(Optional)
Specifies the IKE Proposal list used with the tunnel.
Specifies the IPsec Proposal list used with the tunnel.
The lifetime of the IKE connection in seconds. Whenever it
expires, a new phase-1 exchange will be performed. (Default:
28800)
The lifetime of the IPsec connection in seconds. Whenever
it's exceeded, a re-key will be initiated, providing new IPsec
encryption and authentication session keys. (Default: 3600)
The lifetime of the IPsec connection in kilobytes. (Default: 0)
Specifies if the IPsec tunnel should use Tunnel or Transport
mode. (Default: Tunnel)
Certificate or Pre-shared key.
Selects the Pre-shared key to use with this IPsec Tunnel.
Selects the type of Local ID to use. (Default: Auto)
Specify the local identity of the tunnel ID.
Selects the certificate the security gateway uses to authentic-
ate itself to the other IPsec peer.
Selects one or more root certificates to use with this IPsec
Tunnel.
Selects the identification list to use with this IPsec Tunnel. An
identification list is a list of the identities that are allowed to
establish a IPsec tunnel. (Optional)
Off, Required for inbound or Pass to peer gateway. (Default:
Off)
Specifies the username to pass to the remote gateway vie IKE
137
Chapter 3. Configuration Reference