User manual D-LINK VPN CLIENT NETDEFEND BROCHURE

[. . . ] D-Link VPN Client Manual Contents Client Monitor . Entries in the Profile Settings New Entry - Profile . . 6 . 7 . 7 . 7 . 8 . 8 . 9 . 9 . 9 10 10 11 11 11 12 12 13 14 14 15 15 15 15 16 16 17 17 17 17 18 18 18 18 19 19 19 20 21 21 21 2 Configuration Parameters . Apply tunneling security for local networks Firewall Settings . [. . . ] All IPSec policies that you set up in the "IPSec Configuration" after clicking the button "Policy editor" are in the list box. The policies appear in the box with the name that you specified in the configuration. automatic mode: In this case it is not necessary to configure the IPSec policy in the "IPSec Configuration". Policy Name: When selecting the name of the pre-configured IPSec policy the same policies with their affiliated proposals should be valid for all users. This means that on the client side, as well as on the server side, the same proposals for the policies should be available. Policy lifetimes The lifetime of the policies defined here are applicable to all the policies. Life Type Determines the criteria for key validation based either on duration or transferred bytes or both. The counter is reset for each new SA negotiation. Duration The number of Kbytes or the size of the time interval can be adjusted. kBytes The number of Kbytes or the size of the time interval can be adjusted. 30 Policy editor IKE Policy The parameters in this field relate to phase 1 of the Internet Key Exchange (IKE) with which the control channel for the SA negotiation was established. You determine the IKE mode (Exchange Mode), main mode or aggressive mode, in the profile settings under "IPSec General Settings". The IKE policies that you configure here will be listed for the policy selection. Contents and name of these policies can be changed at any time, i. e. Every policy lists at least one proposal for authentication and encryption algorithms. This means that any policy can consist of several proposals. The same policies with their affiliated proposals should be valid for all users. This means that on the client side, as well as on the server side, the same proposals for the policies should be available. You can extend the list of proposals or delete a proposal from the proposal list by using the buttons "Add" and "Remove". Parameters: · · · · · Policy Name [IKE Policy] Authentication [IKE Policy] Encryption [IKE Policy] Hash [IKE Policy] DH Group [IKE Policy] Policy Name [IKE Policy] Give this policy a name over which later an SPD can be allocated Authentication [IKE Policy] 31 Both sides must have been successfully authenticated in order to establish a control channel for phase 1 (IKE Security Association). The authentication mode is limited to the use of pre-shared keys. This means for mutual authentication a static key is used. You define this key in the parameter folder "Identities" (see Pre-shared key, Shared secret). Encryption [IKE Policy] Symmetrical encryption of messages 5 and 6 in the control channel occurs according to one of the optional encryption algorithms if Main Mode ("Identity Protection Mode") is used. [. . . ] Any claim under this limited warranty must be submitted in writing before the end of the Warranty Period to an Authorized D-Link Service Office. The claim must include a written description of the Software nonconformance in sufficient detail to allow D-Link to confirm the same. The original product owner must provide written proof of purchase of the product (such as a copy of the dated purchase invoice for the product) before the warranty service is provided. What Is Not Covered: This limited warranty provided by D-Link does not cover: Products that have been subjected to abuse, accident, alteration, modification, tampering, negligence, misuse, faulty installation, lack of reasonable care, repair or service in any way that is not contemplated in the documentation for the product, or if the model or License Key has been altered, tampered with, defaced or removed; Initial installation, installation and removal of the product for repair, and shipping costs; Operational adjustments covered in the operating manual for the product, and normal maintenance; Damage that occurs in shipment, due to act of God, failures due to power surge, and cosmetic damage; and Any hardware, software, firmware or other products or services provided by anyone other than D-Link. 47 Disclaimer of Other Warranties: EXCEPT FOR THE LIMITED WARRANTY SPECIFIED HEREIN, THE PRODUCT IS PROVIDED "AS-IS" WITHOUT ANY WARRANTY OF ANY KIND INCLUDING, WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IF ANY IMPLIED WARRANTY CANNOT BE DISCLAIMED IN ANY TERRITORY WHERE A PRODUCT IS SOLD, THE DURATION OF SUCH IMPLIED WARRANTY SHALL BE LIMITED TO NINETY (90) DAYS. [. . . ]