RAM 6000 Informações Técnicas descarregar pdf (Página 86)

Software Manual 86

Network Tab

IPSEC Tunnels

• Click on the Add button and the following General Settings dialog window will appear:

Tunnel Name (Required): Enter some descriptive text in this field as an aid identifying it. The value must not contain

spaces.

Enable Tunnel: Specify whether this tunnel should connect to its remote peer now and after any reboot.

Tunnel Type: Controls the initial mode of the tunnel at startup. The options given to IPsec will be:

Client: auto=start

Server: auto=add

Dynamic: auto=route

For more information, please consult an IPsec user guide on aspects of these specific modes.

Negotiation Mode: As a default, this field is set to Main mode ISAKMP Negotiation. When using dynamic, or DHCP

issued IP addresses (for example with cellular cards), some remote devices may require the use of Aggressive Mode

ISAKMP Negotiation. Should you encounter this situation, you can perform aggressive mode ISAKMP negotiation by

changing this parameter from “Main” to “Aggressive ISAKMP”. To use Aggressive ISAKMP Negotiations, select Yes from

the list provided or No to prevent it’s use.

Dead Peer Detection Action: This feature can help detect when a remote end-point is no longer communicating prop-

erly. Once an error is detected, the “hold” state will only renegotiate the tunnel after new traffic destined for the tun-

nel is detected. The “restart” state will attempt to immediately re-establish the connection to the concentrator. For

this reason, “restart” may use more bandwidth and may not be the ideal choice for a limited data plan. However, if a

host at the central site needs to initiate connections down to a local device through the tunnel, “restart” may be nec-

essary so that the tunnel is always up and waiting for new data from the concentrator.

1 2 ... 81 82 83 84 85 86 87 88 89 90 91 ... 210 211

Sem comentários

RAM 6000 Informações Técnicas Página 86