iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Figure 5.79 Automatic Key Exchange Settings
Auto Reconnect The IPSec connection will reconnect automatically if disconnected for
any reason.
Enable Dead Peer Detection iPECS SBG-1000 will detect whether the tunnel endpoint
has ceased to operate, in which case will terminate the connection. Note that this feature
will be functional only if the other tunnel endpoint supports it. This is determined during the
negotiation phase of the two endpoints.
• DPD Idle Timeout in Seconds Defines how long the IPSec tunnel can be idle before
iPECS SBG-1000 sends the first DPD message to the remote peer, in order to check
if it is alive.
• DPD Delay in Seconds Defines how long iPECS SBG-1000 will wait for the peer’s
response to the DPD message, before sending an additional message (in case of
response failure).
• DPD Timeout in Seconds Defines how long iPECS SBG-1000 will try to contact the
peer, before it declares the peer dead and terminates the connection.
IPSec Automatic Phase 1 – Peer Authentication
• Mode Select the IPSec mode – either ‘Main Mode’ or ‘Aggressive Mode’. Main mode
is a secured but slower mode, which presents negotiable propositions according to the
authentication algorithms that you select in the check boxes. Aggressive Mode is
faster but less secured. When selecting this mode, the algorithm check boxes are
replaced by radio buttons, presenting strict propositions according to your selections.
92