Specifications

Managing Remote Access Configuring Protocols
6
ShoreTel Mobility Router Administration Guide 51
4. In the Keep Alive field, type the interval at which the Mobility Router sends echo
messages over the tunnel after client inactivity. The keepalive time can be a value
between 2 through 3600 seconds. The default value is 55 seconds.
5. In the Session Timeout field, type the amount of time that the client can be inactive
before the session is disconnected. The timeout can be a value between 60 through
65535 seconds. The default timeout is 600 seconds.
6. In the Renegotiation Time field, type the amount of time that elapses before the
encryption key is refreshed. The renegotiation time can be a value between 0 through
65535 minutes. Setting the time to 0 disables the refreshing of the encryption key. The
default value is 0.
3. In the TLS/TCP area, to enable TLS, make sure that the Enable check box is selected. By default,
this check box is selected. To disable TLS, clear the Enable check box.
7. In the Cipher list, select one of the following:

NULL-MD5—Uses no encryption (null cipher) and Message-Digest Algorithm 5 (MD5)
as authentication.

RC4-MD5—Uses a common algorithm created by RSA Security as the encryption
method and Message-Digest Algorithm 5 (MD5) as authentication.

AES128-SHA—Uses Advanced Encryption Standard (AES) with 128-bit key as the
encryption method and Secure Hash Algorithm (SHA) for authentication.

AES256-SHA—Uses Advanced Encryption Standard (AES) with 256-bit key as the
encryption method and Secure Hash Algorithm (SHA) for authentication. (This is the
strongest cipher.)
8. In the Port field, type the number of the port on which the Mobility Router listens to
remote-access requests. The port number can be between 80 through 49151. The default
port number is 443.
If you enabled public NAT on General tab, this port number must match the TCP port
configured for public NAT. If the port does not match, you must configure port forwarding
on the firewall.
9. In the MTU field, type the MTU value. The MTU can be a value from 576 through 1500.
The default MTU value is 1376.
If you do change the MTU, its value must be 16 bytes more than the MTU value defined
for the tunnel, as described in “Configuring General Settings” on page 47.
Tip
Enable TLS for remote provisioning to work correctly in situations where UDP packets are not allowed
in the network environment.
Tip
Although choosing the strongest cipher increases security, using the strongest cipher uses more
resources on the mobile devices and Mobility Router.