Sierra Wireless IPSec User manual

IPSec
User Guide
2120028
Rev 2.2

Rev 2.2 Aug.08 i
Important Notice Duetothenatureofwirelesscommunications,transmission
andreceptionofdatacanneverbeguaranteed.Datamaybe
delayed,corrupted(i.e.,haveerrors)orbetotallylost.
Althoughsignificantdelaysorlossesofdataarerarewhen
wirelessdevicessuchastheSierraWirelessAirLinkProduct
Nameareusedinanormalmannerwithawell‐constructed
network,theSierraWirelessAirLinkProductNameshould
notbeusedinsituationswherefailuretotransmitorreceive
datacouldresultindamageofanykindtotheuserorany
otherparty,includingbutnotlimitedtopersonalinjury,death,
orlossofproperty.SierraWirelessacceptsnoresponsibilityfor
damagesofanykindresultingfromdelaysorerrorsindata
transmittedorreceivedusingtheSierraWirelessAirLink
ProductName,orforfailureoftheSierraWirelessAirLink
ProductNametotransmitorreceivesuchdata.
Safety and Hazards DonotoperatetheSierraWirelessAirLinkProductNamein
areaswhereblastingisinprogress,whereexplosive
atmospheresmaybepresent,nearmedicalequipment,near
lifesupportequipment,oranyequipmentwhichmaybe
susceptibletoanyformofradiointerference.Insuchareas,the
SierraWirelessAirLinkProductNameMUSTBEPOWERED
OFF.TheSierraWirelessAirLinkProductNamecantransmit
signalsthatcouldinterferewiththisequipment.
DonotoperatetheSierraWirelessAirLinkProductNamein
anyaircraft,whethertheaircraftisonthegroundorinflight.
Inaircraft,theSierraWirelessAirLinkProductNameMUST
BEPOWEREDOFF.Whenoperating,theSierraWireless
AirLinkProductNamecantransmitsignalsthatcould
interferewithvariousonboardsystems.
Note: Some airlines may permit the use of cellular phones while the
aircraft is on the ground and the door is open. Sierra Wireless AirLink
Product Name may be used at this time.
Thedriveroroperatorofanyvehicleshouldnotoperatethe
SierraWirelessAirLinkProductNamewhileincontrolofa
vehicle.Doingsowilldetractfromthedriveroroperatorʹs
controlandoperationofthatvehicle.Insomestatesand
provinces,operatingsuchcommunicationsdeviceswhilein
controlofavehicleisanoffence.
Limitation of
Liability
Theinformationinthismanualissubjecttochangewithout
noticeanddoesnotrepresentacommitmentonthepartof
SierraWireless.SIERRAWIRELESSANDITSAFFILIATES
SPECIFICALLYDISCLAIMLIABILITYFORANYANDALL

Rev 2.2 Aug.08 ii
DIRECT,INDIRECT,SPECIAL,GENERAL,INCIDENTAL,
CONSEQUENTIAL,PUNITIVEOREXEMPLARYDAMAGES
INCLUDING,BUTNOTLIMITEDTO,LOSSOFPROFITSOR
REVENUEORANTICIPATEDPROFITSORREVENUE
ARISINGOUTOFTHEUSEORINABILITYTOUSEANY
SIERRAWIRELESSPRODUCT,EVENIFSIERRAWIRELESS
AND/ORITSAFFILIATESHASBEENADVISEDOFTHE
POSSIBILITYOFSUCHDAMAGESORTHEYARE
FORESEEABLEORFORCLAIMSBYANYTHIRDPARTY.
Notwithstandingtheforegoing,innoeventshallSierra
Wirelessand/oritsaffiliatesaggregateliabilityarisingunderor
inconnectionwiththeSierraWirelessproduct,regardlessof
thenumberofevents,occurrences,orclaimsgivingriseto
liability,beinexcessofthepricepaidbythepurchaserforthe
SierraWirelessproduct.
Patents Portionsofthisproductmaybecoveredbysomeorallofthe
followingUSpatents:
5,515,013 5,629,960 5,845,216 5,847,553 5,878,234
5,890,057 5,929,815 6,169,884 6,191,741 6,199,168
6,339,405 6,359,591 6,400,336 6,516,204 6,561,851
6,643,501 6,653,979 6,697,030 6,785,830 6,845,249
6,847,830 6,876,697 6,879,585 6,886,049 6,968,171
6,985,757 7,023,878 7,053,843 7,106,569 7,145,267
7,200,512 D442,170 D459,303
andotherpatentspending.
Copyright ©2008SierraWireless.Allrightsreserved.
Trademarks AirCard®and“HeartoftheWirelessMachine®”areregistered
trademarksofSierraWireless.Watcher®isatrademarkof
SierraWireless,registeredintheEuropeanCommunity.
AirLink™andAceWare™aretrademarksofSierraWireless.
SierraWireless,theSierraWirelesslogo,theredwavedesign,
andthered‐tippedantennaaretrademarksofSierraWireless.
Windows®isaregisteredtrademarkofMicrosoftCorporation.
Othertrademarksarethepropertyoftherespectiveowners.

Rev 2.2 Aug.08 iii
Contact
Information
Consultourwebsiteforup‐to‐dateproductdescriptions,
documentation,applicationnotes,firmwareupgrades,trouble‐
shootingtips,andpressreleases:
www.sierrawireless.com
Revision History
Support Desk: Phone: [phone]
Hours: 5:00 AM to 5:00 PM Pacific Time,
Monday to Friday, except US Holidays
E-mail: [email protected]
Sales Desk: Phone: [phone]
1-604-232-1488
Hours: 8:00 AM to 5:00 PM Pacific Time
E-mail: [e-mail]
Post: Sierra Wireless America
39677 Eureka Drive
Newark, CA
USA 94560
Sierra Wireless
13811 Wireless Way
Richmond, BC
Canada V6V 3A4
Fax: [phone]
1-604-231-1109
Web: www.sierrawireless.com
Revision
number Release date Changes
1.x Q2: 2008 IPSec User Guide documentation created.
2.x Q2:2008 IPSec User Guide documentation revised and updated.

Rev 2.2 Aug.08 1
Contents
Introducing IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Key Features of IPSec VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Remote Access Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Installation and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
Set-Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Modem Configuration Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
AT*RESETCFG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
HTTP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Application Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Network behind the modem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Sample Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
VPN Configuration file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Static IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Dynamic IP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
IPsec Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Standards of the M2M IPSec Support . . . . . . . . . . . . . . . . . . . . . . . . . 24
Security Algorithms: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Reference Material . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Rev 2.2 Aug.08 1
1
1: Introducing IPSec
•Overview
•Scenarios IPprotocolthatdrivestheInternetisinherentlyinsecure.
InternetProtocolSecurity(IPSec),whichisastandards‐based
protocol,securescommunicationsofIPpacketsoverpublic
networks.
Organizationsarestrivingtoprotecttheircommunication
channelsfromunauthorizedviewingandenforcingauthenti‐
cationoftheentitiesattheothersideofthechannel.
Unauthorizedaccesstothesensitivedatacanbeavoidedby
usingIPSec.ByapplyingsecurityattheIPlayerintheOSI
model,communicationscanbeprotected.Inthismannerthe
upperlayersintheOSImodelcanleveragethesecurity
servicesprovidedattheIPlayer.
SierraWirelessAirLink™hasaddedIPSec,asalatestaddition
tothelistoffeatures,inalltheALEOS‐poweredAirLinkXand
XTplatformsofdevices.
Overview
IPSecisacommonnetworklayersecuritycontrolandisused
tocreateavirtualprivatenetwork(VPN).
TheadvantagesoftheIPSecfeatureincludes:
•DataProtection:DataContentConfidentialityallowsusers
toprotecttheirdatafromanyunauthorizedview,because
thedataisencrypted(encryptionalgorithmsareused).
•AccessControl:AccessControlimpliesasecurityservice
thatpreventsunauthorizeduseofaSecurityGateway,a
networkbehindagatewayorbandwidthonthatnetwork.
•DataOriginAuthentication:DataOriginAuthentication
verifiestheactualsender,thuseliminatingthepossibility
offorgingtheactualsender’sidentificationbyathird‐
party.
•DataIntegrity:DataIntegrityAuthenticationallowsboth
endsofthecommunicationchanneltoconfirmthatthe
originaldatasenthasbeenreceivedastransmitted,
withoutbeingtamperedwithintransit.Thisisachieved
byusingauthenticationalgorithmsandtheiroutputs.
TheIPSecarchitecturemodelincludestheSierraWireless
AirLinkmodemasaremotegatewayatoneendcommuni‐
cating,throughaVPNtunnel,withaVPNgatewayatthe

IPsec User Guide
2 2120028
otherend.TheremotegatewayisconnectedtoaRemote
networkandtheVPNisconnectedtotheLocalnetwork.The
communicationofdataissecurethroughtheIPSecprotocols.
Figure 1-1: IPSec Architecture
Key Features of IPSec VPN
•IPseciscompatiblewithawiderangeofapplications
•Providesenhanceddatasecurityforallapplications
connectedthroughacompatibleAirlinkgateway
•Noadditionalinstallationrequired
•Simplewizard‐basedsetup
•Remotemanagement,controlandconfigurationvia
AceWaretoolsandutilities
•Securetwo‐waycommunicationchannelwithdata
encryption
•Canbedownloaded,configuredandinstalledover‐the‐air
forcurrentlydeployedAirLinkRavenX,PinPointXand
RavenXTdevice
Sectionsinthisdocument,thatprovidefurtherinformation
aboutIPSec,are:
1. UserscenarioswithgraphicillustrationoftheIPSec
feature.
2. VPNconfigurationsettingsandVPNparameters.
3. IPsecconfigurationsettings.Itisassumedthataudience
hasknowledgeofAceManager.
4. Testingandbasictroubleshooting.

Introducing IPSec
Rev 2.2 Aug.08 3
Scenarios
SierraWirelessAirLinkmodemswithIPSecaredesignedto
supportthegateway‐to‐gatewaysecuritymodel.
IPsecisthemostgeneralsecuritymodel,inthatitallowseither
sidetoinitiateaVPNsession.Someuserscenario’sare
discussedinthissection.
Intheseexamples,theterm“VPNtunnel”isusedtoindicatea
secureIPSecconnection.
Remote Access Scenarios
1. Thisscenarioshowsthreeremoteaccessactivities:
a. AVLApplicationServer(onewaytransmissionof
securedata):AirLinkmodemhasGPScapability
(PinPointmodel).ThemodemhassetupaVPNtunnel
withacorporateVPNboxandisconfiguredtosend
GPSlocationdatatothecorporatenetwork.
Figure 1-2: AVL Application Server scenario
b. CorporateEmailServer(twowaytransmissionof
securedata):AirLinkmodemisconnectedtoalaptop.
ThemodemsetuphasaVPNtunnelwiththe
corporateVPNbox.Throughthemodem,thelaptop
cansecurelyaccessthecorporateemailserver.

IPsec User Guide
4 2120028
Figure 1-3: Corporate Email Server scenario
c. Google(twowaytransmissionofinsecuredata):The
laptopuserwantstoaccessGoogle.TheGoogleaccess
canbeperformedwhilethecorporateVPNtunnelis
active.
Figure 1-4: Web Server scenario
d. Pass‐through(twowaytransmissionofsecuredata):
TheAirLinkmodemhasregulardataconnectionwith
thelaptop(VPNClient)andtheVPNgateway.

Introducing IPSec
Rev 2.2 Aug.08 5
Figure 1-5: Pass through mode
Thenextchapterwalksyouthroughtheinstallationand
configurationstepsofestablishinganIPSecset‐uponyour
modemtoconnecttothetestserversatSierraWireless.You
canfollowthesameprocessforconnectingtoyourownVPN
gateway.

Rev 2.2 Aug.08 6
2
2: Installation and Configuration
•Set-Up
•Installation
•Configuration Settings Thischaptercoversinstallationandconfigurationsteps(Sierra
Wirelesstestset‐up),tousetheIPSecfeature.
Note: Factory default settings
allow you to connect to Sierra
Wireless test equipment.
Theillustrationbelowshowstheuserbeingconnectedtothe
SierraWirelesstestenvironmentsetup.Theuserlaptop
connectedtoanAirLinkmodem,communicateswiththeweb
serverovertheinternetandthroughtheSierraWirelessVPN
Gateway(CiscoandNetgear).
Figure 2-1: User set up
Oncethetunnelisestablishedandyouareconnectedtothe
webserver,thewebbrowserdisplaysconnectivitytothe
SierraWirelessIPSectestserver.
Figure 2-2: Connection to the web browser

IPsec User Guide
7 2120028
Set-Up
IPSechasawidevarietyofuserconfigurationoptions.When
IPSecisenabled,itmustbedoneforthepurposeofcreatinga
VPNtunnelwithacorporateVPNbox.InorderfortheSierra
WirelessAirLinkmodemtocommunicatewiththeVPNbox,
themodemmustbeconfiguredtosupportatleastoneofthe
securitypoliciesoftheVPNbox.Hence,theVPNboxsecurity
configurationmustbeavailableasareferencebeforeconfig‐
uringtheAirLinkmodemforIPSec.
Theinstallationstepsareasfollows:
1. ForStaticIP:Usingyourmodem’sstaticIP,configureyour
CiscoVPNtoallowatunneltobeestablishedwithyour
modem’sIPaddress.
2. ForDynamicIP:ConfigureyourCiscoVPNtoallowa
tunneltobeestablisheddynamicallywithyourmodem’s
currentIPaddress
3. ConnectyourPCtothemodem,andlaunchAceManager.
NavigatetotheIPSecconfigurationscreen.Selectthe
parametersthatcorrespondtoyourCiscoconfiguration,
andpresstheWritebuttononthetop.CloseAceManager.
4. Openabrowserorotherapplicationandattemptto
communicatewithyourenterprisenetwork.
Modem Configuration Requirements
Themodemshouldbeprovisionedandcapableofpassing
trafficoverthecarriernetwork.Ifthemodemisnotprovi‐
sioned,youwillneedtoactivateitinordertoconfigurethe
accountparameters.TheQuickStartGuideforyourmodem
willleadyouthroughthestepstoactivateorconfigureyour
modem.YoucanaccesstheQuickStartGuidesonthesupport
pageforyourmodem.For1xorEV‐DOmodems,youwillalso
needaSetupWizard,whichisavailableonthesupportpageas
well.
ThemodemcanhaveastaticordynamicIPaddress,which
canbeobtainedfromAceManager.TheIPaddressislistedas
thefirstdisplayedentryontheStatuspage.
Themodemfirmwareversionshouldbe3.3orhigher.Ifthe
modemfirmwareis3.2orlower,youwillneedtoupgradethe
modemfirmware.PleasecontactyourSierraWirelesssales
engineerfortheappropriatefirmwareupdateutility.

IPsec User Guide
8 2120028
Installation
PleaseuninstallanypreviousversionsofAceManagerthathad
beeninstalledonyourPC,priortoinstallingthelatestversion
ofAceManager.
AceManagerisavailableforfreefromSierraWirelessAirLink
andcanbedownloadedfromhttp://www.sierrawireless.com/
support/AirLink/Wireless_Ace.aspx.
OncethisnewversionofAceManagerandthenewfirmwareis
installedonyourPC,pleaseperformafactorydefaultresetof
themodemusingaATcommand:
AT*RESETCFG
Thiscommandwillresetthemodemwithfactorydefaultsand
oncethemodemcomesbackup,pleaseconnectthemodem
withAceManager.
Configuration Settings
OncetheAceManagerapplicationisinstalled,youcanrunit
fromyourStartmenuorfromtheicononthedesktop.
1. Start AceManager
Start > All Programs >AirLink Communications > AceManager

IPsec User Guide
9 2120028
Figure 2-3: IPSec Pane in AceManager
2. Click on IPSec
Thedesiredgrouptabwillshowrespectiveparametersand
detailsontherightsideofthepane.ClickingonIPSecwill
displaylistofparameterswithdefaultvaluesanduserconfig‐
urableinputfields(New Value).
Table 2-1: Configuration Parameters in AceManager
Name Default Value Description
IPSec Interface 0Select 1-Modem-OTA.
Choose “0” fir disabling IPSec.
Choose “1” for enabling IPSec.
Choose “4” when you use
ethernet for testing IPSec.
IPSec Status Disconnected Shows the status of IPSec.

IPsec User Guide
10 2120028
IPSec Gateway 64.163.70.30 Fill in the IPSec of the VPN
concentrator.
Pre-shared Key 1 SierraWireless 8 to 31 case sensitive ASCII
characters
Negotiation Mode 1The choices in drop down options
are main or aggressive.
IKE Encryption Algorithm 7You can choose other options
like, Blowfish, 3 DES, Cast 128
and AES.
3DES or AES can be used for
stronger encryption.
IKE Authentication Algorithm 2Three different authentication
algorithms are among the drop-
down choices.
1-MD5 is for minimal security and
2-SH-1 is higher security. 5-SHA-
256 is also an option.
IKE Key Group 2Different Key Groups are, 1-DH1,
2-DH2 and 3-DH3.
IKE SA Life Time 7200 (seconds) Enter the lifetime of VPN of how
long it is valid. “0” reflects no
expiry.
Local Address Type 1Choose from drop-down menu.
•“1” indicates Modem Public
IP. It is the IP of the device
behind the modem, when the
modem is in public mode.
•“2” indicates Host Private
Subnet of the device behind
the modem on the same
subnet, when the modem is
in private mode.
•“5” indicates Single Address.
•“17” indicates Subnet
Address.
Local Address 0.0.0.0 Local Address of the device
connected to the modem.
Local Address - end or mask 0.0.0.0 Subnet address with the Subnet
Mask
Remote Address Type 17 Network behind the Concentrator.
Table 2-1: Configuration Parameters in AceManager
Name Default Value Description

IPsec User Guide
11 2120028
Remote Address 10.11.12.0 Address of the remote device.
Choose from two options: 5-
Single Address and 17-Subnet
Address.
Remote Address - end or mask 255.255.255.0 Subnet address with the Subnet
Mask.
IPSec Encryption Algorithm 3You can choose other options
like, Blowfish, 3 DES, Cast 128
and AES. The option “0” indicates
that IPSec encryption may not be
used.
3DES or AES can be used for
stronger encryption.
IPSec Authentication Algorithm 2Three different authentication
algorithms are among the drop-
down choices.
1-MD5 is for minimal security and
2-SH-1 is higher security. 5-SHA-
256 is also an option. “0” is also
an option for not applying IPSec
aunthentication algorithm.
IPSec Key Group 2Different Key Groups are, 1-DH1,
2-DH2 and 5-DH5.
DH5 denotes highest security
IPSec SA Life Time 7200 (seconds) This indicates how often the
modem renegotiates the IKE SA.
While the renegotiation happens
the VPN tunnel gets
disconnected temporarily.
Incoming Out of Band 0Enable (1) or Disable (0) access
to modem remotely from
machines that are not part of the
IPSec network.
Outgoing Aleos Out of Band 1Enable (1) or Disable (0) sending
of ALEOS traffic over the IPSec
tunnel to a remote location.
This option allows ALEOS
generated data (E.g. RAP) to be
sent outside the IPSec tunnel.
Outgoing Host Out of Band 0Enable (1) or Disable (0) access
to resources outside the IPSec
network. (e.g. Enable access to
sites like www.google.com over
non IPSec channel).
Table 2-1: Configuration Parameters in AceManager
Name Default Value Description

IPsec User Guide
12 2120028
Toconfirmasuccessfulconnection,thefollowingtestscanbe
run:
•ConnectaPCtothemodemandattempttopingtheIP
address10.11.12.13.Thetunnelmighttakesometimeto
beestablished.Howeveroncethetunnelisestablishedyou
willreceiveresponsestoyourping.
•Oncetheabilitytopingtheprivateaddresshasbeenestab‐
lished,pleasetryopeningabrowserandpointingitto
http://10.11.12.13.
Oncethesetwotestspass,abaselinefortheIPSecconfigu‐
rationinthemodemhasbeenestablished.
YoucannowbegintomaketheIPSecconfigurationchangesto
getthemodemconnectingtoyourownIPSecgateway.
Differentscenariousecasesandtheirconfigurationstepsin
AceManager,toestablishtheIPSectunnel,areaddressedin
thefollowingsections.
HTTP Server
APCconnectedtoaSierraWirelessAirLinkModemusesweb
browsertoviewanHTTPserverbehindtheIPsecGateway.
TheConfigurationstepsare:
1. InAceManager,clickontheIPSectab.Pleasereferto
Figure2‐3.
2. ConfiguretheIPSec Interface parameteras“1”,toenable
IPSec.OnceIPSecisenabled,thefactorydefaultsettings
shouldberestored.Table2‐1listsalltheIPSecparameter
defaultvalues.TherequiredfieldsforIPSectobeestab‐
lishedare:
a. IPSec Gateway
b. Pre-shared Key 1
c. IKE Encryption Algorithm
d. IKE Authorization Algorithm
e. IKE Key Group
f. IKE SA Life Time
g. Remote Address
h. IPSec Encryption Algorithm
i. IPSec Authentication Algorithm
j. IPSec Key Group
k. IPSec SA Life Time
l. Incoming Out of Band:Ifyouwantmobiletermination

IPsec User Guide
13 2120028
m. Outgoing Host Out of Band:Toaccessinternetby
bypassingtheIPSectunnel,youcansetthisparameter
as“1”.
Note: In Chapter 1, Remote Access Scenarios section includes the
Google web server scenario, where the outgoing Host Out of Band
can be set to 1 to access internet outside the IPSec tunnel.
3. ClickonWrite,inthetopbar.
4. ClickonReset,toresetthemodem.
5. IPSecstatusdisplaysas“Connected”.
Oncethetunnelcomesup,pingthewebbrowser.Theweb
browsershouldbeabletoreachtheserver.Anexampleofa
webbrowserscreenshot,afterthetunnelestablishes,is
provided.
Figure 2-4: Web Browser
Application Server
ASierraWirelessAirLinkModemsendsAVLApplication
ServerdatathroughthetunnelfortheReportServerthatis
behindtheIPsecGateway.
TheConfigurationstepsare:
1. InAceManager,clickonthePinPointtabandensurevalues
thatcorrespondtoFigure2‐5.

IPsec User Guide
14 2120028
Figure 2-5: PinPoint Configuration
2. Providethe Server IP Addressontheright‐handsidepane.
3. EntertheReport Interval time.
4. Configurethe IPSec Interface parameteras“1”,toenable
IPSec.OnceIPSecisenabled,thefactorydefaultsettings
shouldberestored.Table2‐1listsalltheIPSecparameter
defaultvalues.TherequiredfieldsforIPSectobeestab‐
lishedare:
a. IPSec Gateway
b. Pre-shared Key 1
c. IKE Encryption Algorithm
d. IKE Authorization Algorithm
e. IKE Key Group
f. IKE SA Life Time
g. Remote Address
h. IPSec Encryption Algorithm
i. IPSec Authentication Algorithm
j. IPSec Key Group
k. IPSec SA Life Time
l. Incoming Out of Band:Ifyouwantmobiletermination
m. Outgoing Host Out of Band:Toaccessinternetoutsidethe
tunnel,fromthemodem.
5. ClickonWrite.
6. ClickonReset,toresetthemodem.