Interfacegroup; Ipsectunnel - D-Link NetDefend DFL-210 Cli Reference Manual

3.28.5. IPsecTunnel

3.28.4. InterfaceGroup

Description
Use an interface group to combine several interfaces for a simplified security policy.
Properties
Name
Equivalent
Members
Comments
3.28.5. IPsecTunnel
Description
An IPsec tunnel item is used to define IPsec endpoint and will appear as a logical interface in the
system.
Properties
Index
Name
LocalNetwork
RemoteNetwork
RemoteEndpoint
IKEConfigModePool
IKEAlgorithms
IPsecAlgorithms
IKELifeTimeSeconds
Specifies a symbolic name for the interface. (Identifier)
Specifies if the interfaces should be considered security equivalent, that means
that if enabled the interface group can be used as a destination interface in rules
where connections might need to be moved between the two interfaces. (Default:
No)
Specifies the interfaces that are included in the interface group.
Text describing the current object. (Optional)
The index of the object, starting at 1. (Identifier)
Specifies a symbolic name for the interface. (Identifier)
The network on "this side" of the IPsec tunnel. The IPsec tun-
nel will be established between this network and the remote
network.
The network connected to the remote gateway. The IPsec tun-
nel will be established between the local network and this net-
work.
Specifies the IP address of the remote endpoint. This is the
address the security gateway will establish the IPsec tunnel
to. It also dictates from where inbound IPsec tunnels are al-
lowed. (Optional)
Selects IKE Config Mode Pool to use for the tunnel.
(Optional)
Specifies the IKE Proposal list used with the tunnel.
Specifies the IPsec Proposal list used with the tunnel.
The lifetime of the IKE connection in seconds. Whenever it
expires, a new phase-1 exchange will be performed. (Default:
28800)
122
Chapter 3. Configuration Reference