Define a custom Gateway Settings element
The Gateway Settings element defines performance-related VPN options for Engines.
For more details about the product and how to configure features, click Help or press F1.
Steps
- Select Configuration, then browse to SD-WAN.
- Browse to .
- Right-click Gateway Settings branch in the element, then select New Gateway Settings.
- Configure the settings, then click OK.
Gateway Settings Properties dialog box
Use this dialog box to define the properties of a Gateway element.
Option | Definition |
---|---|
Name | The name of the element. |
Comment (Optional) |
A comment for your own reference. |
MOBIKE Return Routability Check | |
Before SA update | The remote peer's IP address is first checked and then, if the IP address is valid, the IP address is updated in the SA. |
After SA update | The IP address is updated in the SA and then verified. |
Negotiation Retry | |
Retry Limit | Number of possible retries when sending a packet to a remote gateway. The negotiation for opening a tunnel is canceled when negotiation has been attempted the number of times specified. |
Retry Timer | Initial time between retry attempts. This value doubles at each attempt until the value entered for the Retry Timer Maximum is reached. Enter the value in milliseconds. |
Retry Timer Maximum | Maximum delay between two retry attempts. When the Retry Timer reaches this value, all further retries are done at the interval defined here until the Retry Limit is reached. Enter the value in milliseconds. |
Negotiation Expiration | Tunnel negotiation is canceled if it is not completed before the expiration time is reached. Enter the value in milliseconds. |
Certificate Cache | |
CRL Validity | Defines how long any Certificate Revocation Lists (CRL) are valid. Overrides the validity stated on the received CRLs. Typically, individual CRLs should not be trusted over long periods of time. When the CRL validity time is reached, the Firewall fetches new CRLs from their issuing authorities. Define the value in seconds. |