D-Link DSR-500N Product Manual - Page 93
IPsec policy configuration continued Auto policy via IKE
UPC - 790069338397
View all D-Link DSR-500N manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 93 highlights
Unified Services Router User Manual Figure 57: IPsec policy configuration continued (Auto policy via IKE) A Manual policy does not use IKE and instead relies on manual keying to exchange authentication parameters between the two IPsec hosts. The incoming and outgoing security parameter index (SPI) values must be mirrored on the remote tunnel endpoint. As well the encryption and integrity algorithms and keys must match on the remote IPsec host exactly in order for the tunnel to establish successfully. Note that using Auto policies with IKE are preferred as in some IPsec implementations the SPI (security parameter index) values require conversion at each endpoint. DSR supports VPN roll-over feature. This means that policies configured on primary WAN will rollover to the seconday WAN incase of a link failure on a primary WAN. This feature can be used only if your WAN is configured in Auto-Rolleover mode. 91