D-Link DAP-600P User Manual page 184

DAP-600P Wireless AC2600 Wave 2 MU-MIMO Dual Band
PoE Access Point / Router
User Manual
Parameter
Type
Enable DPD
DPD delay
DPD timeout
TCP MSS
An operation mode of the IPsec tunnel. Select a value from the drop-
down list.
• TUNNEL: As a rule, it is used to create a secure connection to
remote networks. In this mode, the source IP packet is fully
encrypted and added to a new IP packet and data transfer is
based on the header of the new IP packet.
• TRANSPORT: As a rule, it is used to encrypt data stream
within one network. In this mode, only the content of the
source IP packet is encrypted, its header remains unchanged
and data transfer is based on the source header.
Move the switch to the right to enable using DPD protocol for this
tunnel. Such a setting allows to check the status of the remote host: if
encrypted packets exchange between the access point and the remote
host breaks down, the access point starts sending DPD messages to the
remote host. If the switch is moved to to the left, the DPD delay and
DPD timeout fields are not available for editing.
A time period (in seconds) between DPD messages. By default, the
value 30 is specified.
A waiting period for the response to a DPD message (in seconds). If
the host does not answer in the specified time, the access point breaks
down the tunnel connection, updates information on it, and tries to
reestablish the connection. By default, the value 120 is specified.
Maximum Segment Size of a TCP packet. This parameter influences
the size of a TCP packet which will be sent from the remote host to the
access point.
If the Manual value is selected, you can specify the value of this
parameter for each subnet of the tunnel in the MTU field. The field is
displayed in the window for adding a subnet in the Tunneled
Networks section.
If the Path MTU discovery value is selected, the parameter will be
configured automatically for all created subnets.
Page 184 of 235
Configuring via Web-based Interface
Description