IS200DSPXH1BDD模拟量输入模块
1.所需设置。2.格式可以是ipv4地址或FQDN指定远程网关。身份验证配置窗口项值设置描述密钥管理1。所需设置2。预共享密钥8到32个字符。从该IPsec隧道的下拉框中选择密钥管理。IKE+预共享密钥：用户需要设置密钥（8~32个字符）。IKE+X.509：用户需要证书进行身份验证。IKE+X.509仅在证书已正确颁发时可用。请参阅本手册的证书部分，以及基于web的实用程序中的对象定义>证书。本地ID可选设置指定此IPsec隧道的本地ID以进行身份验证。选择“用户名”作为“本地ID”，然后输入用户名。用户名可能包括但不能是所有数字。为本地ID选择FQDN并输入FQDN。选择User@FQDN对于本地ID，输入User@FQDN.选择Key ID作为Local ID，然后输入Key ID（英文字母或数字）。远程ID可选设置指定此IPsec隧道的远程ID以进行身份验证。选择“用户名”作为“远程ID”，然后输入用户名。用户名可能包括但不能是所有数字。为本地ID选择FQDN并输入FQDN。选择User@FQDN对于远程ID，输入User@FQDN.为Remote ID选择Key ID，然后输入Key ID（英文字母或数字）。当选择隧道方案中的动态VPN选项时，远程ID将不可用。IKE阶段窗口EW200工业蜂窝网关220项目值设置描述协商模式主模式默认设置为此IPsec隧道指定协商模式。选择主模式或侵略模式。默认情况下选择了X-Auth ne指定此IPsec隧道的X-Auth角色。选择服务器、客户端或网络。为此网关选择的服务器将是X-Auth服务器。单击X-Auth帐户按钮以创建远程X-Auth客户端帐户。为此网关选择的客户端将是X-Auth客户端。输入要由X-Auth服务器网关验证的用户名和密码。X-Auth客户端将不适用于隧道方案中选择的动态VPN选项。死对等检测（DPD）1。默认选中2。默认超时180秒和延迟30秒单击启用框以启用DPD功能。以秒为单位指定超时和延迟时间。值范围：超时和延迟为0~999秒。阶段1关键生命周期1。所需设置2。默认3600s 3。最大86400组18。单击启用以启用此设置。保存单击保存保存设置撤消单击撤消取消设置后退单击后退返回上一页。创建/编辑动态VPN服务器列表类似于为站点/主机到站点/主机场景创建IPsec VPN隧道，当应用添加/编辑按钮时，将显示一系列配置屏幕。它们是隧道配置、本地和远程配置、身份验证、IKE阶段、IKE建议定义、IPsec阶段和IPsec建议定义。将网关的隧道详细信息设置为动态VPN服务器。您可以为每个WAN接口配置一个动态VPN服务器。EW200工业蜂窝网关222隧道配置窗口项值设置描述隧道默认未选中选中启用框以激活动态IPsec VPN隧道。隧道名称1。所需设置2。字符串格式，任意文本输入隧道名称。值范围：1~19个字符。接口1。所需设置2。默认情况下选择WAN 1选择要在其上建立IPsec隧道的WAN接口。隧道方案1。所需设置2。默认情况下选择动态VPN IPsec隧道方案固定为动态VPN。封装协议1。所需设置2。默认情况下选择ESP从此IPsec隧道的下拉框中选择封装协议。可用封装为ESP和AH。IKE版本1。所需设置2。默认情况下选择v1指定此IPSec隧道的IKE版本。本地和远程配置窗口项值设置描述本地子网所需设置指定本地子网IP地址。
1. Required setting. 2. Format can be a ipv4 address or FQDN Specify the Remote Gateway. Authentication Configuration Window Item Value setting Description Key Management 1. Required setting 2. Pre-shared Key 8 to 32 characters. Select Key Management from the dropdown box for this IPsec tunnel. IKE+Pre-shared Key: user needs to set a key (8 ~ 32 characters). IKE+X.509: user needs Certificate to authenticate. IKE+X.509 will be available only when Certificate has been cond properly. Refer to Certificate section of this manual and also Object Definition > Certificate in web-based utility. Local ID Optional setting Specify the Local ID for this IPsec tunnel to authenticate. Select User Name for Local ID and enter the username. The username may include but can’t be all numbers. Select FQDN for Local ID and enter the FQDN. Select User@FQDN for Local ID and enter the User@FQDN. Select Key ID for Local ID and enter the Key ID (English letter or number). Remote ID Optional setting Specify the Remote ID for this IPsec tunnel to authenticate. Select User Name for Remote ID and enter the username. The username may include but can’t be all numbers. Select FQDN for Local ID and enter the FQDN. Select User@FQDN for Remote ID and enter the User@FQDN. Select Key ID for Remote ID and enter the Key ID (English letter or number). Remote ID will be t available when Dynamic VPN option in Tunnel Scenario is selected. IKE Phase Window EW200 Industrial Cellular Gateway 220 Item Value setting Description Negotiation Mode Main Mode is set by default Specify the Negotiation Mode for this IPsec tunnel. Select Main Mode or Aggressive Mode. X-Auth ne is selected by default Specify the X-Auth role for this IPsec tunnel. Select Server, Client, or ne. Selected Server for this gateway will be an X-Auth server. Click on the X-Auth Account button to create a remote X-Auth client account. Selected Client for this gateway will be an X-Auth client. Enter User name and Password to be authenticated by the X-Auth server gateway. X-Auth Client will t be available for Dynamic VPN option selected in Tunnel Scenario. Dead Peer Detection (DPD) 1. Checked by default 2. Default Timeout 180s and Delay 30s Click Enable box to enable DPD function. Specify the Timeout and Delay time in seconds. Value Range: 0 ~ 999 seconds for Timeout and Delay. Phase1 Key Life Time 1. Required setting 2. Default 3600s 3. Max. 86400 Group18. Click Enable to enable this setting. Save Click Save to save the settings Undo Click Undo to cancel the settings Back Click Back to return to the previous page. Create/Edit Dynamic VPN Server List Similar to creating an IPsec VPN Tunnel for site/host to site/host scenario, when the Add / Edit button is applied a series of configuration screens will appear. They are Tunnel Configuration, Local & Remote Configuration, Authentication, IKE Phase, IKE Proposal Definition, IPsec Phase, and IPsec Proposal Definition. Con the tunnel details for the gateway as a Dynamic VPN server. You can con one Dynamic VPN server for each WAN interface. EW200 Industrial Cellular Gateway 222 Tunnel Configuration Window Item Value setting Description Tunnel Unchecked by default Check the Enable box to activate the Dynamic IPsec VPN tunnel. Tunnel Name 1. Required setting 2. String format, any text Enter a tunnel name. Value Range: 1 ~ 19 characters. Interface 1. Required setting 2. WAN 1 is selected by default Select the WAN interface on which IPsec tunnel is to be established. Tunnel Scenario 1. Required setting 2. Dynamic VPN is selected by default The IPsec tunneling scenario is fixed to Dynamic VPN. Encapsulation Protocol 1. Required setting 2. ESP is selected by default Select the Encapsulation Protocol from the dropdown box for this IPsec tunnel. Available encapsulations are ESP and AH. IKE Version 1. Required setting 2. v1 is selected by default Specify the IKE version for this IPSec tunnel. Local & Remote Configuration Window Item Value setting Description Local Subnet Required setting Specify the Local Subnet IP address.
