Ipsec - Teltonika RUT100 HSDPA User Manual

Enable GRE Tunnel. Check the box to enable the GRE Tunnel function.
TTL. Specify the fixed time-to-live (TTL) value on tunneled packets [0-255]. The 0 is a special
value meaning that packets inherit the TTL value. Default: 0.
Enable PMTUD. Check the box to enable the Path Maximum Transmission Unit Discovery
(PMTUD) status on this tunnel.
Local Network
Local network IP. Local network IP is taken from network settings. To change it change
router IP address mask in the Network settings section (Configuration => Network settings).
Local network Subnet mask. Local network Subnet mask is taken from network settings. To
change it change router subnet mask in the Network settings section (Configuration => Network
settings).
Local tunnel IP. Specify the fixed local IP address for tunneled packets.
Local tunnel Subnet mask. Specify the subnet mask for the local tunnel.
Local Endpoint IP. Local Endpoint IP is ISP assigned by the ISP provider.
Remote Network
Remote Endpoint IP. Set remote tunnel Endpoint IP.
Remote network IP. Specify remote LAN IP address.
Remote network Subnet mask. Specify remote LAN Subnet mask.
Add – click this button to add configured remote LAN network settings to the router routing
table (IP address and subnet mask), so that all packet with destination to the remote LAN would go
through the GRE tunnel.
4.7.3

IPsec

The IPsec protocol client enables the router to establish a secure connection to an IPsec peer
via the Internet. IPsec is supported in two modes - transport and tunnel. Transport mode creates
secure point to point channel between two hosts. Tunnel mode can be used to build a secure
connection between two remote LANs serving as a VPN solution.
IPsec system maintains two databases: Security Policy Database (SPD) which defines whether
to apply IPsec to a packet or not and specify which/how IPsec-SA is applied and Security Association
Database (SAD), which contain Key of each IPsec-SA.
The establishment of the Security Association (IPsec-SA) between two peers is needed for
IPsec communication. It can be done by using manual or automated configuration.
Note: router establishes starts establishing tunnel when data from router to remote site over
tunnel must be send. For automatic tunnel establishment used tunnel keep alive feature.
30 | P a g e