Specifications

Managing Remote Access Configuring Protocols

ShoreTel Mobility Router Administration Guide 50

1. Select Configuration > System > Networking > Remote Access > Protocol tab. The following

screen displays example settings:

2. In the Datagram TLS/UDP area, to enable DTLS, make sure that the Enable check box is

selected. By default, this check box is selected. To disable DTLS, clear the Enable check box.

1. In the Cipher list, select one of the following:



NULL-MD5—Uses no encryption (null cipher) and Message-Digest Algorithm 5 (MD5)

for authentication. (This is the weakest cipher.)



AES128-SHA—Uses Advanced Encryption Standard (AES) with 128-bit key as the

encryption method and Secure Hash Algorithm (SHA) for authentication.



AES256-SHA—Uses Advanced Encryption Standard (AES) with 256-bit key as the

encryption method and Secure Hash Algorithm (SHA) for authentication. (This is the

strongest cipher.)

2. In the Port field, type the number of the port on which the Mobility Router listens to

remote-access requests. The port number can be between 80 through 49151. The default

port number is 443.

If you enabled public NAT on General tab, this port number must match the UDP port

configured for public NAT. If the port number does not match, you must configure port

forwarding on the firewall.

3. In the MTU field, type the MTU value. The MTU can be a value from 576 through 1440.

The default MTU value is 1376.

If you do change the MTU, its value must be 16 bytes more than the MTU value defined

for the tunnel, as described in “Configuring General Settings” on page 47.

Note

Although choosing the strongest cipher increases security, using the strongest cipher uses more

resources on the mobile devices and Mobility Router.