Ipsectunnelsettings - D-Link NetDefend DFL-210 Cli Reference Manual
Network security firewall
Hide thumbs
Also See for NetDefend DFL-210:
- User manual (495 pages) ,
- Log reference manual (476 pages) ,
- Cli reference manual (194 pages)
Table of Contents
Advertisement
3.55.10. IPsecTunnelSettings
ICMPSendPerSecLimit
SilentlyDropStateICMPErrors
3.55.10. IPsecTunnelSettings
Description
Settings for the IPsec tunnel interfaces used for establishing IPsec VPN connections to and from this
system.
Properties
IPsecMaxTunnels
IPsecMaxRules
IKESendInitialContact
IKESendCRLs
IKECRLValidityTime
IKEMaxCAPath
IPsecCertCacheMaxCerts
IPsecBeforeRules
IPsecGWNameCacheTime
DPDMetric
DPDKeepTime
DPDExpireTime
IPsecHardwareAcceleration
IPsecDisablePKAccel
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
Maximum number of ICMP responses that will be sent each
second. (Default: 500)
Silently drop ICMP errors regarding statefully tracked open
connections. (Default: Yes)
Amount of IPsec tunnels allowed (0 = automatic). (Default:
0)
Amount of IPsec rules allowed (0 = automatic). (Default: 0)
Send 'initial contact' messages. (Default: Yes)
Send CRLs in the IKE exchange. (Default: Yes)
Maximum number of seconds a CRL is considered valid
(0=obey the 'next update' field in the CRL). (Default: 86400)
Maximum number of CA certificates in a certificate path.
(Default: 15)
Maximum number of entries in the certificate cache. (Default:
1024)
Pass IKE & IPsec (ESP/AH) traffic sent to the security gate-
way directly to the IPsec engine without consulting the rule-
set. (Default: Yes)
Amount of time to keep an IPsec tunnel open when the re-
mote DNS name fails to resolve. (Default: 14400)
Metric 10s of seconds with no traffic or other evidence of life
in tunnel before SA is removed. (Default: 3)
Number 10s of seconds a SA will remain in dead cache after
a delete. DPD will not trigger if peer already is cached as
dead. (Default: 2)
Number of seconds that DPD-R-U-THERE messages will be
sent. (Default: 15)
IPsec hardware acceleration. (Default: Inline)
Disable hardware acceleration for public-key operations.
192
Chapter 3. Configuration Reference
Advertisement
Table of Contents
