 IKE Policy | TP-Link TL-ER604W instruction

Figure 3-62 IKE Policy

The following items are displayed on this screen:

IKE Policy

Policy Name: Specify a unique name to the IKE policy for identification and management purposes. The IKE policy can be applied to IPsec policy.

Exchange Mode: Select the IKE Exchange Mode in phase 1, and ensure the remote VPN peer uses the same mode.

Main: Main mode provides identity protection and exchanges more information, which applies to the scenarios with higher requirement for identity protection.

Aggressive: Aggressive Mode establishes a faster connection but with lower security, which applies to scenarios with lower requirement for identity protection.

Local ID Type: Select the local ID type for IKE negotiation. IP Address: uses an IP address as the ID in IKE negotiation. FQDN: uses a name as the ID.

-91-

Image 96

TP-Link TL-ER604W manual IKE Policy Following items are displayed on this screen,  IKE Policy

Contents

TL-ER604W Copyright & Trademarks FCC Statement Contents III Hardware Specifications 148 Application 130149 Glossary 151 Package Contents Symbol Description Intended ReadersConventions Overview of this Guide Overview of the Router Features Wireless Traffic ControlSecurity Appearance Front Panel LEDs Status Indication Rear Panel System Mode NetworkStatus Page WAN Mode  NAT Mode Non-NAT Mode  Classic Mode  WAN Mode 3.2 WAN1Tips Static IP WAN Static IP Following items are displayed on this screen  Static IP Dynamic IP  Dynamic IPConnection Type Host Name Get IP Address by UnicastUse the following DNS Server PPPoE WAN PPPoE Password Active ModeSettings Keep Alive Account Name Service Name ISP AddressSecondary Connection Subnet Address Gateway Address L2TP  L2TP Settings 10 WAN L2TP Following items are displayed on this screen Default Gateway SecondaryConnection  L2TP Status Pptp  Pptp Settings Server IP Internet connection by the Connect or Disconnect  Pptp Status BigPond  BigPond Settings 12 WAN Bigpond Following items are displayed on this screen  BigPond Status ISP 4 LAN 4.1 LANDhcp  Dhcp Settings Dhcp Client Dhcp Reservation Dhcp Reservation MAC Address  List of Reserved AddressSet the MAC Address for LAN port Set the MAC Address for WAN port Switch Statistics MAC Address Port Port Mirror  Statistics Enable Port Mirror ModeMirroring Port Mirrored Port Rate Control Application Example Rate Control Port Config  Port Config Port Status Port Vlan Port Vlan Wireless Wireless SettingWireless Setting  Wireless Setting  Wireless Parameter Description Ssid BroadcastAP Isolation Security WPA/WPA2 WEP Multi-SSID Key FormatHexadecimal and Ascii formats are  Multi-SSID Config  General Enable/Disable Guest Network Encryption Group Key Auth Type 1.3 WDS  List of Group Scan  ParameterBSSIDto be bridged Key Type Wireless Advanced  Wireless AdvancedKey ： Short GI MAC Filtering Host Status  Filtering Rules Rule List User Group Group Host Status  Group Config  User ConfigUser  View Config View List of User View NAT Setup Advanced1 NAT One-to-One NAT  One-to-One NAT Multi-Nets NAT  List of Rules Multi-Nets NAT Configuration procedure Application Example Network Requirements Virtual Server  Virtual Server InterfaceProtocol Port Triggering  Port Triggering 1.6 ALG 38 ALG Following items are displayed on this screen Setup Traffic Control323 ALG IPsec ALG Control Control all the timeLimited Upstream Bandwidth Control Session Limit Session LimitLimited Bandwidth Session List  List of Session Limit Configuration Load BalancePolicy Routing WAN Link Backup 45 Link Backup Following items are displayed on this screen WAN Config ProtocolTiming Failover Routing Static Route Protocol  List of Protocol 47 Static Route Following items are displayed on this screen  Static Route 5.2 RIP 48 RIP Following items are displayed on this screen  List of RIP Route Table Firewall Anti ARP SpoofingIP-MAC Binding ARP Scanning  IP-MAC Binding ARP List Attack Defense Enable Attack Flood DefensePacket Anomaly Defense Access Control MAC FilteringURL Filtering  MAC Filtering  URL Filtering Rule Object Access Rules Web Filtering  Access Rules ServicePolicy Source Service Group on 3.3.1 GroupDestination Priority  Service  List of ServiceName Dest. Port App Control Control Rules Control Rules Application VPN Database 1 IKE IKE Policy 62 IKE Policy Following items are displayed on this screen  IKE Policy IKE Proposal 63 IKE Proposal Following items are displayed on this screen  IKE Proposal IPsec IPsec Policy List of IKE Proposal  IPsec Policy Policy NameLocal Subnet Policy Mode Remote SubnetRemote Gateway IKE Policy AH Authentication Key-In ESP Authentication Key-InAH Authentication Key-Out ESP Authentication Key-Out IPsec Proposal  List of IPsec Policy IPsec IPsec Proposal  List of IPsec Proposal Protocol Media Tunnel Length of Header Authentication 3 L2TP/PPTPIPsec SA 3.1 L2TP/PPTP Tunnel  L2TP/PPTP Tunnel Tunnel Max ConnectionsL2TP/PPTP Server Pre-shard Key  List of Configurations IP Address PoolList of L2TP/PPTP Tunnel  IP Address Pool Services PPPoE ServerGeneral 70 General Following items are displayed on this screen IP Address Pool Account  AccountIP Address Assigned Static IP Address Is 48. If Enable Advanced Account Features is not selected, Exceptional IP List of Account Bulletin List of Account Exceptional IP Interval  E-BulletinTitle Dynamic DNS Publisher List of E-Bulletin DynDNS  Dyndns Ddns No-IP  List of DynDNS Account No-IP Ddns PeanutHull  List of No-IP Account PeanutHull Ddns Comexe  List of PeanutHull Account UPnP  Comexe Ddns List of Comexe Account Maintenance Admin SetupAdministrator  List of UPnP Mapping Login Parameter  Administrator Remote Management  Remote Management Factory Defaults Management List of Subnet Reboot  Configuration VersionExport and Import  Export Firmware Upgrade License Statistics Interface Traffic Statistics Interface Traffic Statistics 123 IP Traffic Statistics  Advanced WAN Information Diagnostics Diagnostics Traffic Statistics  IP Traffic Statistics Online Detection  Ping Tracert Time PingDNS Lookup Port Displays the detected WAN port Detection Logs  Config  List of LogsSeverity Send System Logs Application Network Requirements Network Topology Configurations Internet SettingSystem Mode System Mode Internet Connection VPN Setting IKE SettingSettings IPsec VPN  IKE Policy IKE1 IPsec Setting  IPsec Proposal  IPsec Policy PFS DH1 Pptp VPN Setting  IP Address Pool  L2TP/PPTP Tunnel Network Management User Group Group  User App Control  View Enable Bandwidth Control 11 App Rules Bandwidth Control Rule LAN WAN1 Network Security LAN ARP DefenseScan and import the entries to ARP List WAN ARP Defense Set IP-MAC Binding Entry ManuallySet Attack Defense Attack Defense 20 Attack Defense 145 Traffic Monitoring StatisticsPage Appendix a Hardware Specifications Environmental and Physical Appendix B FAQ Page Appendix C Glossary Glossary Description Allows dissimilar communication devices to communicate Port or device that connects to a LAN. Other devices Enterprise