D-Link DSR-250N User Manual page 95

Unified Services Router
Fig ure 57: I Psec po licy conf ig ura tio n continued (Aut o policy v ia IKE)
A Manual policy does not use IKE and instead relies on ma nual keying to exchange
authentication parameters between the two IPsec hosts. The incoming and outgoing
security parameter index (SPI) values must be mirrored on the remote tunnel
endpoint. As well the encryption and integrity algorithms and keys must ma tch on the
remote IPsec host exactly in order for the tunnel to establish successfully. Note that
using Auto policies with IKE are preferred as in some IPsec implementations the SPI
(security parameter index) values require conversion at each endpoint.
DSR supports VPN roll-over feature. This means that policies configured on primary
WAN will rollover to the seconday WAN incase of a link failure on a primary WAN.
This feature can be used only if your WAN is configured in Auto-Rolleover mode.
93
User Manual