Motorola WiNG 5.5 Reference Manual page 206

Table of Contents

Advertisement

5 - 120 WiNG 5.5 Access Point System Reference Guide
41. Refer to the following fields to define IPSec security, lifetime and authentication settings:
df bit
IPsec Lifetime (kb)
IPsec Lifetime (seconds)
Plain Text Deny
42. Define the following IKE Dead Peer Detection settings:
DPD Keep Alive
Figure 5-71 Profile Security - Global VPN Settings tab
Select the DF bit handling technique used for the ESP encapsulating header. Options
include clear, set and copy. The default setting is copy.
Set a connection volume lifetime (in kilobytes) for the duration of an IPSec VPN security
association. Once the set volume is exceeded, the association is timed out. Use the
spinner control to set the volume from 500 - 2,147,483,646 kilobytes. The default
settings is 4,608,000 kilobytes.
Set a lifetime (in seconds) for the duration of an IPSec VPN security association. Once
the set value is exceeded, the association is timed out. Options include Seconds (120 -
86,400), Minutes (2 - 1,440), Hours (1 - 24) or Days (1). The default setting is 3,600
seconds.
Select global or interface to set the scope of the ACL. The default setting is global,
expanding the rules of the ACL beyond just the interface.
Define the interval (or frequency) of IKE keep alive messages for dead peer detection.
Options include Seconds (10 - 3,600), Minutes (1 - 60) and Hours (1). The default setting
is 30 seconds.

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents