IS200DSCBH1A备件模块,模块备件
TLS重新协商时间（秒）默认值为3600指定TLS重新协商的时间间隔。值范围：-1~86400。连接重试（秒）默认值为-1指定连接重试的时间间隔。默认值-1表示需要执行连接重试。值范围：-1~86400，-1表示需要重试。默认情况下，已选择自动指定DNS的设置。从自动/手动中选择。其他配置可选设置在此处输入可选配置字符串。最多允许256个字符。值范围：0~256个字符。保存单击保存保存设置。撤消单击X取消更改并返回到最后一页。EW200工业蜂窝网关238 5.1.3 L2TP第2层隧道协议（L2TP）是一种隧道协议，用于支持虚拟专用网络（VPN）或作为ISP提供服务的一部分。它本身不提供任何加密或保密性。相反，它依赖于在隧道内传递的加密协议来提供隐私。此网关可以同时充当L2TP服务器和L2TP客户端。L2TP服务器：它必须具有静态IP或FQDN，以便客户端创建L2TP隧道。它还维护用于客户端登录验证的“用户帐户列表”（用户名/密码）；有一个虚拟IP池，用于为每个连接的L2TP客户端分配虚拟IP。L2TP客户端：它可以是具有动态IP的远程办公室中的移动用户或网关。要设置隧道，请添加“用户名”、“密码”和服务器的全局IP。此外，将每个隧道的操作模式确定为主连接、每个隧道的故障切换或负载平衡隧道，以增加总带宽。为数据包流选择“默认网关”或“远程子网”。您还可以在“默认网关/远程子网”参数中定义通过L2TP隧道的流量类型。EW200工业蜂窝网关239对于L2TP客户端对等体，L2TP服务器对等体的Intranet需要远程子网项目。在L2TP客户端对等端，其目的地位于专用子网中的数据包将通过L2TP隧道传输。其他将基于L2TP客户端对等端网关的当前路由策略进行传输。但是，如果在远程子网字段中输入0.0.0.0/0，它将被视为L2TP客户端对等体的“默认网关”设置，所有数据包（包括L2TP客户端的Internet访问）都将通过已建立的L2TP隧道。这意味着远程L2TP服务器对等端控制来自L2TP客户端对等端的任何数据包流。
TLS Renegotiation Time (seconds) The value is 3600 by default Specify the time interval of TLS Renegotiation Time. Value Range: -1 ~ 86400. Connection Retry(seconds) The value is -1 by default Specify the time interval of Connection Retry. The default -1 means that there is need to execute connection retry. Value Range: -1 ~ 86400, and -1 means retry is required. DNS By default Automatically is selected Specify the setting of DNS. Select from Automatically/Manually. Additional Configuration Optional setting Enter optional configuration string here. Up to 256 characters is allowable. Value Range: 0 ~ 256characters. Save Click Save to save the settings. Undo Click X to cancel the changes and return to last page. EW200 Industrial Cellular Gateway 238 5.1.3 L2TP Layer 2 Tunneling Protocol (L2TP) is a tunneling protocol used to support virtual private networks (VPNs) or as part of the delivery of services by ISPs. It does t provide any encryption or confidentiality by itself. Rather, it relies on an encryption protocol that it passes within the tunnel to provide privacy. This Gateway can behave as an L2TP server and an L2TP client both at the same time. L2TP Server: It must have a static IP or a FQDN for clients to create L2TP tunnels. It also maintains “User Account list” (user name/ password) for client login authentication; There is a virtual IP pool to assign virtual IP to each connected L2TP client. L2TP Client: It can be mobile users or gateways in remote offices with dynamic IP. To set up a tunnel, add “user name”, “password” and server’s global IP. In addition, identify the operation mode for each tunnel as main connection, failover for ather tunnel, or load balance tunnel to increase overall bandwidth. Select “Default Gateway” or “Remote Subnet” for packet flow. You can also define what kind of traffic will pass through the L2TP tunnel in the “Default Gateway / Remote Subnet” parameter. EW200 Industrial Cellular Gateway 239 For the L2TP client peer, a Remote Subnet item is required for the Intranet of L2TP server peer. At L2TP client peer, the packets whose destination is in the dedicated subnet will be transferred via the L2TP tunnel. Others will be transferred based on current routing policy of the gateway at L2TP client peer. But, if 0.0.0.0/0 is entered in the Remote Subnet field, it will be treated as a "Default Gateway" setting for the L2TP client peer, and all packets, including the Internet accessing of L2TP client peer, will go through the established L2TP tunnel. That means the remote L2TP server peer controls the flow of any packets from the L2TP client peer.
