Table of Contents
Advertisement
The following table describes each of the fields of the IPSec VPN Connection Settings page.
ITEM
IPSec profile
Profile name
Remote IPSec address
Remote LAN address
Remote LAN subnet mask
Local LAN address
Local LAN subnet mask
Encapsulation type
IKE mode
PFS
IKE encryption
IKE hash
IPSec encryption
IPSec hash
DH group
DPD action
DPD keep alive time
DPD timeout
IKE re-key time
SA life time
Key mode
Pre-shared key
Remote ID
Local ID
Update Time
Local RSA Key Upload
Remote RSA Key Upload
Private key Passphrase
Key / Certificate
IPSec Certificate Upload
Note: For more detail on configuring IPSec, please visit the product page on the NetComm Wireless website at
http://support.netcommwireless.com/product/m2m-wireless-series/ntc-30wv
NetComm Wireless NTC-30WV 3G Outdoor Router with Voice
58
Enables or disables the VPN profile.
A name used to identify the VPN connection profile.
The IP address or domain name of the IPSec server.
Enter the IP address of the remote network for use on the VPN connection.
Enter the subnet mask in use on the remote network.
Enter the IP address of the local network for use on the VPN connection.
Enter the subnet mask in use on the local network.
Select the encapsulation protocol to use with the VPN connection. You can choose ESP, AH or Any.
Select the IKE mode to use with the VPN connection. You can choose Main, Aggressive or Any.
Choose whether Perfect Forward Secrecy is ON or OFF for the VPN connection.
Select the cipher type to use for the Internet Key Exchange.
Select the IKE Hash type to use for the VPN connection. The hash is used for authentication of packets for the key
exchange.
Select the IPSec encryption type to use with the VPN connection.
Select the IPSec hash type to use for the VPN connection. The hash is used for authentication of packets for the VPN
connection.
Select the desired Diffie-Hellman group to use. Higher groups are more secure but also require longer to generate a key.
Select the desired Dead Peer Detection action. This is the action to take when a dead Internet Key Exchange Peer is
detected.
Enter the time in seconds for the interval between Dead Peer Detection keep alive messages.
Enter the time in seconds of no response from a peer before Dead Peer Detection times out.
Enter the time in seconds between changes of the encryption key. To disable changing the key, set this to 0.
Enter the time in seconds for the security association lifetime.
Select the type of key mode in use for the VPN connection. You can select from:
Pre Shared Key
RSA keys
Certificates
The pre-shared key is the key that peers used to authenticate each other for Internet Key Exchange.
Specifies the domain name of the remote network.
Specifies the domain name of the local network.
Displays the last time the key was updated.
Select the RSA key file for the local router here by clicking the Browse button.
Select the RSA key file for the remote router here by clicking the Browse button.
The Private key passphrase of the router is the passphrase used when generating the router's private key using
OpenSSL CA.
Select the type of key or certificate to use for authentication. You can select Local private key, Local public certificate,
Remote public certificate, CA certificate, CRL certificate.
Select the IPSec certificate to upload by clicking the Browse button.
Table 19 - IPSec Configuration Items
DEFINITION
and click on FAQs/Self Help.
www.netcommwireless.com
Advertisement
Table of Contents
