User's Manual

Exchange Mode:
Select the IKE Exchange Mode in phase 1, and ensure the remote VPN
peer uses the same mode.
 Main: Main mode provides identity protection and exchanges more
information, which applies to the scenarios with higher requirement
for identity protection.
 Aggressive: Aggressive Mode establishes a faster connection but
with lower security, which applies to scenarios with lower
requirement for identity protection.
Local ID Type:
Select the local ID type for IKE negotiation. IP Address: uses an IP
address as the ID in IKE negotiation. FQDN: uses a name as the ID.
Local ID:
The local WAN IP will be inputted automatically if IP Address type is
selected. If Name type is selected, enter a name for the local device as
the ID in IKE negotiation
Remote ID Type:
Select the remote ID type for IKE negotiation. IP Address: uses an IP
address as the ID in IKE negotiation. FQDN: uses a name as the ID.
Remote ID:
The remote gateway IP will be inputted automatically if IP Address type
is selected. If Name type is selected, enter the name of the remote peer
as the ID in IKE negotiation.
IKE Proposal:
Select the Proposal for IKE negotiation phase 1. Up to four proposals
can be selected.
Pre-shared Key:
Enter the Pre-shared Key for IKE authentication, and ensure both the
two peers use the same key. The key should consist of visible
characters without blank space.
SA Lifetime:
Specify ISAKMP SA Lifetime in IKE negotiation.
DPD:
Enable or disable DPD (Dead Peer Detect) function. If enabled, the IKE
endpoint can send a DPD request to the peer to inspect whether the
IKE peer is alive.
DPD Interval:
Enter the interval after which the DPD is triggered.
-92-