Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Manually set IPsec values!!!!
  •  
ajamali

Messages: 100
Karma: 1
Send a private message to this user
I am trying to manually set IPsec values instead of using the default settings in Kerio Control.
I think the only way to do this is by export and import winroute.cfg file

but I need more information about the following parameters under VpnTunnels

AcceptRoutes
AuthType
DpdAction
ForceEncaps

what is it used for??

I read this KB and this list

please Kerio we need more information and more KB about IPsec

  •  
ajamali

Messages: 100
Karma: 1
Send a private message to this user
Ok Fine, I know now AcceptRoutes & AuthType what is used for

but have no idea about DpdAction & ForceEncaps

Please help
  •  
ajamali

Messages: 100
Karma: 1
Send a private message to this user
Is there any way to set the MTU and Fragmentation in IPsec Tunnel

I have fragmentation issues caused by large IPsec packets to be dropped

could some one help please
  •  
ajamali

Messages: 100
Karma: 1
Send a private message to this user
fragmentation and disconnect issues in IPsec Tunnels has been solved now

this is the problem that we have

1- VPN connection is very slow. SOLVED
2- If we transfer files over VPN tunnel, the transfer drops even with small files. SOLVED
3- All remote computer is joined to Domain, when user login to windows it take very long time around 5-8 Min. SOLVED
4- Sometimes and randomly one of the created tunnel disconnect and stop sending traffic. SOLVED
  •  
ujvda

Messages: 1
Karma: 0
Send a private message to this user
Dear Ajamali

could you sen me a link or a pdf where i can find the explanations for this paramters:
AcceptRoutes
AuthType
DpdAction
ForceEncaps
I try to test a VPN with a cisco asa but i do not success Sad
can i set the lifetimes too?
  •  
ajamali

Messages: 100
Karma: 1
Send a private message to this user
to configure these parameters in Kerio Control you need to edit configuration file manually
this is example how to set the provided parameters in configuration file

let me know if you need more informations

BR,
Amjad


<listitem>
<variable name="Id">9</variable>
<variable name="Enabled">1</variable>
<variable name="IPsec">1</variable>
<variable name="Name">06-XXXX</variable>
<variable name="Server">XXXXXXXXXX</variable>
<variable name="Fingerprint">00000000000000000000000000000000</variable >
<variable name="AcceptRoutes">Dynamic</variable>
<variable name="AuthType">0</variable>
<variable name="Secret">D3S:XXXXXXXXXX</variable>
<variable name="LeftId">XXXXXXXX</variable>
<variable name="RightId">XXXXXXXXX</variable>
<variable name="RightCert"></variable>
<variable name="RightSendCert">auto</variable>
<variable name="MaxCertReq">5</variable>
<variable name="Ike">aes256-sha1-modp1024</variable>
<variable name="Esp">aes256-sha1</variable>
<variable name="DpdAction">restart</variable>
<variable name="ForceEncaps">0</variable>
<variable name="CustomOptions">dpddelay=30s</variable>
<variable name="CustomOptions">dpdtimeout=120s</variable>
<variable name="CustomOptions">ikelifetime=24h</variable>
<variable name="CustomOptions">lifetime=1h</variable>
</listitem>
Previous Topic: Internet Explorer 10-11 don't authenticate no more
Next Topic: Can not create VLAN
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Oct 17 02:00:35 CEST 2017

Total time taken to generate the page: 0.00426 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.