|Timeout||30||The maximum period to wait until the request for IPsec tunnel connection establishment must be approved by the remote peer.|
|Tunnel check interval [s]||30||The interval between queries for a valid exchange that is assignable to an IPsec tunnel.|
|Dead Peer Detection Interval [s]||5|
Tunnels can be configured to be Active or Passive. An active tunnel is capable of establishing a connection while a passive tunnel is waiting for a connection request.
This parameter sets the interval between keep-alive checks on the remote peer.
|Use IPSec dynamic IPs|
|If the service is connected to the Internet via a dynamic link (dynamic IP address), select Yes. The server IP address is not yet known at configuration time and IKE then listens to all local IP addresses.|
|IPSec Log Level||0||The debug log level of IKE. The debug log may be very “noisy.” Do not select a log level greater than 0 if the log is not required for solving an issue.|
|Pre-shared key (PSK)||-||Holds the pre-shared IKE key.|
If selected, IKEv2 will be used.
If deselected, IKEv2 will be disabled and some additional memory will be saved.
|IKEv2 Make Before Break|
|Selecting this option creates a duplicate of the IKE and all IPsec SAs, and the deletes the old ones. This setting requires that both peers can handle overlapping SAs.|