User's Manual



54
NetComm Wireless 3G Light Industrial M2M Route
r
www.netcommwireless.com
The following table describes each of the fields of the IPSec VPN Connection Settings page.
ITEM DEFINITION
IPSec profile Enables or disables the VPN profile.
Profile name A name used to identify the VPN connection profile.
Remote IPSec server address The IP address of the IPSec server.
Remote LAN address Enter the IP address of the remote network for use on the VPN connection.
Remote LAN subnet mask Enter the subnet mask in use on the remote network.
Local LAN address Enter the IP address of the local network for use on the VPN connection.
Local LAN subnet mask Enter the subnet mask in use on the local network.
Encapsulation type Select the encapsulation protocol to use with the VPN connection. You can choose ESP, AH or Any.
IKE mode Select the IKE mode to use with the VPN connection. You can choose Main, Aggressive or Any.
PFS Choose whether Perfect Forward Secrecy is ON or OFF for the VPN connection.
IKE encryption Select the cipher type to use for the Internet Key Exchange.
IKE hash Select the IKE Hash type to use for the VPN connection. The hash is used for authentication of packets for the key exchange.
IPSec encryption Select the IPSec encryption type to use with the VPN connection.
IPSec hash Select the IPSec hash type to use for the VPN connection. The hash is used for authentication of packets for the VPN connection.
DH group Select the desired Diffie-Hellman group to use. Higher groups are more secure but also require longer to generate a key.
DPD action Select the desired Dead Peer Detection action. This is the action to take when a dead Internet Key Exchange Peer is detected.
DPD keep alive time Enter the time in seconds for the interval between Dead Peer Detection keep alive messages.
DPD timeout Enter the time in seconds of no response from a peer before Dead Peer Detection times out.
IKE re-key time Enter the time in seconds between changes of the encryption key. To disable changing the key, set this to 0.
SA life time Enter the time in seconds for the security association lifetime.
Key mode
Select the type of key mode in use for the VPN connection. You can select from:
 Pre Shared Key
 RSA keys
 Certificates
Pre-shared key The pre-shared key is the key that peers used to authenticate each other for Internet Key Exchange.
Remote ID Specifies the domain name of the remote network.
Local ID Specifies the domain name of the local network.
Update Time Displays the last time the key was updated.
Local RSA Key Upload Select the RSA key file for the local router here by clicking the Browse button.
Remote RSA Key Upload Select the RSA key file for the remote router here by clicking the Browse button.
Private key Passphrase The Private key passphrase of the router is the passphrase used when generating the router’s private key using OpenSSL CA.
Key / Certificate Select the type of key or certificate to use for authentication. You can select Local private key, Local public certificate, Remote public certificate, CA certificate, CRL certificate.
IPSec Certificate Upload Select the IPSec certificate to upload by clicking the Browse button.
Table 15 - IPSec Configuration Items
