BinTec RS353j User Manual page 373

bintec elmeg GmbH
bintec RS Series
Field
Send Initial Contact
Message
Sync SAs with ISP in-
terface state
Use Zero Cookies
Zero Cookie Size
Dynamic RADIUS Au-
thentication
Fields in the PKI Handling Options menu.
Field
Ignore Certificate Re-
Description
The function is enabled with
The function is disabled by default.
Select whether IKE Initial Contact messages are to be sent dur-
ing IKE (phase 1) if no SAs with a peer exist.
The function is enabled with
The function is enabled by default.
Select whether all SAs are to be deleted whose data traffic was
routed via an interface on which the status has changed from
to , or
The function is enabled with
The function is disabled by default.
Select whether zeroed ISAKMP Cookies are to be sent.
These are equivalent to the SPI (Security Parameter Index) in
IKE proposals; as they are redundant, they are normally set to
the value of the negotiation currently in progress. Alternatively,
your device can use zeroes for all values of the cookie. In this
case, select .
Only for Use Zero Cookies = enabled.
Enter the length in bytes of the zeroed SPI used in IKE propos-
als.
The default value is .
Select whether RADIUS authentication is to be activated via
IPSec.
The function is enabled with
The function is disabled by default.
Description
Select whether certificate requests received from the remote
.
.
.
.
.
16 VPN
359