-81-
Select the IKE Exchange Mode in phase 1, and ensure the remote VPN
tection and exchanges more
information, which applies to the scenarios with higher requirement
for identity protection.
Aggressive: Aggressive Mode establishes a faster connection but
with lower security, which applies to scenarios with lower
requirement for identity protection.
Local ID Type:
Select the local ID type for IKE negotiation. IP Address: uses an IP
address as the ID in IKE negotiation. FQDN: uses a name as the ID.
Local ID:
The local WAN IP will be inputted automatically if IP Address type is
selected. If Name type is selected, enter a name for the local device as
the ID i
Remote ID Type:
Select the remote ID type for IKE negotiation. IP Address: uses an IP
ress as the ID in IKE negotiation. FQDN: uses a name as the ID.
as the ID in IKE negotiation.
IKE Proposal:
Pre-shared Ke
ace.
:
DPD:
Dead Peer Detect) function. If enabled, the IKE
ther the IKE
DPD Interva
List of IKE Policy
In this table, you can view the information of IKE Policies and edit them by the action buttons.
Exchange Mode:
peer uses the same mode.
Main: Main mode provides identity pro
n IKE negotiation
add
Remote ID:
The remote gateway IP will be inputted automatically if IP Address type
is selected. If Name type is selected, enter the name of the remote peer
Select the Proposal for IKE negotiation phase 1. Up to four proposals
can be selected.
y:
Enter the Pre-shared Key for IKE authentication, and ensure both the
two peers use the same key. The key should consist of visible characters
without blank sp
SA Lifetime
Specify ISAKMP SA Lifetime in IKE negotiation.
Enable or disable DPD (
endpoint can send a DPD request to the peer to inspect whe
peer is alive.
l:
Enter the interval after which the DPD is triggered.