D-Link NetDefend DFL-210 Cli Reference Manual page 123

3.28.5. IPsecTunnel
IPsecLifeTimeSeconds
IPsecLifeTimeKilobytes
EncapsulationMode
AuthMethod
PSK
LocalIDType
LocalIDValue
GatewayCertificate
RootCertificates
IDList
XAuth
XAuthUsername
XAuthPassword
DHCPOverIPsec
AddRouteToRemoteNet
PlaintextMTU
OriginatorIPType
OriginatorIP
OriginatorHAIP
IKEMode
DHGroup
PFS
PFSDHGroup
The lifetime of the IPsec connection in seconds. Whenever
it's exceeded, a re-key will be initiated, providing new IPsec
encryption and authentication session keys. (Default: 3600)
The lifetime of the IPsec connection in kilobytes. (Default: 0)
Specifies if the IPsec tunnel should use Tunnel or Transport
mode. (Default: Tunnel)
Certificate or Pre-shared key. (Default: PSK)
Selects the Pre-shared key to use with this IPsec Tunnel.
Selects the type of Local ID to use. (Default: Auto)
Specify the local identity of the tunnel ID.
Selects the certificate the security gateway uses to authentic-
ate itself to the other IPsec peer.
Selects one or more root certificates to use with this IPsec
Tunnel.
Selects the identification list to use with this IPsec Tunnel. An
identification list is a list of the identities that are allowed to
establish a IPsec tunnel. (Optional)
Off, Required for inbound or Pass to peer gateway. (Default:
Off)
Specifies the username to pass to the remote gateway vie IKE
XAuth.
Specifies the password to pass to the remote gateway vie IKE
XAuth.
Allow DHCP over IPsec from single-host clients. (Default:
No)
Dynamically add route to the remote networks when a tunnel
is established. (Default: No)
Specifies the size in bytes at which to fragment plaintext
packets (rather than fragmenting IPsec). (Default: 1420)
Specifies what IP address to use as source IP in e.g. NAT.
(Default: LocalInterface)
Manually specified originator IP address to use as source IP
in e.g. NAT.
Manually specified private originator IP address for use in
HA. (Optional)
Specifies which IKE mode to use: main or aggressive.
(Default: Main)
Specifies the Diffie-Hellman group to use when doing key ex-
changes in IKE. (Default: 2)
Specifies whether PFS should be used or not. (Default: None)
Specifies which Diffie-Hellman group to use with PFS.
(Default: 2)
123
Chapter 3. Configuration Reference