VPN Global Settings Configuration Page Options
- Select Configure>IPSec VPN>Global
Settings.
The VPN Global Settings configuration page appears. Table 100 explains the contents of this page.
- Click one:
- Save—Applies changes to the configuration. Enter information as specified in Table 101.
- Reset—Resets the configuration without saving changes.
Table 100: VPN Global Configuration Options
Field | Function |
|---|---|
| IKE Global Settings | |
Response Bad SPI | Displays the response to invalid IPsec SPI values . |
Maximum Responses | Displays the number of times to respond to invalid SPI values per gateway |
| IPsec Global Settings | |
VPN Monitor Options | Displays whether or not VPN monitoring options is selected. |
Interval | Displays the interval at which ICMP requests are sent to the peer. |
Threshold | Displays the number of consecutive unsuccessful pings before the peer is declared unreachable. |
Table 101: Add VPN Global Configuration Details
Field | Function | Action |
|---|---|---|
| IKE Global Settings | ||
Response Bad SPI | Provides response to invalid IPsec security parameter index values. If the SAs between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized. | Select the check box if you want the device to respond to IPsec packets with bad SPI values. |
Maximum Responses | Specifies the number of times to respond to invalid SPI values per gateway. | Enter a value from 1 through 30. The default is 5. This option is available when Response Bad SPI is selected. |
| IPSec Global Settings | ||
VPN Monitor Options | Provides VPN monitoring options. | Select the check box if you want the device to monitor VPN liveliness. |
Interval | Specifies the interval at which ICMP requests are sent to the peer. | Enter a value from 1 through 36,000 seconds. |
Threshold | Specifies the number of consecutive unsuccessful pings before the peer is declared unreachable. | Enter a value from 1 through 65,536. |