Mobile peer information
Select a peer from the list to display information about it.
|Comments||Description given of the remote peer.|
|Remote gateway||This field is grayed out for mobile peers.|
|Local address||External interface presented to set up the tunnel with the peer shown.
|IKE profile||This option makes it possible to select the protection model associated with your VPN policy, from three preconfigured profiles: StrongEncryption, GoodEncryption and Mobile. Other profiles can be created or modified in the tab Encryption profiles.|
|IKE version||This option allows selecting the version of the IKE protocol (IKEv1 or IKEv2) that the peer uses.|
|Authentication method||This field will show the authentication method selected during the creation of your peer via the wizard.
You may modify your choice by selecting another method from the drop-down list.
|Certificate||If you have chosen the Certificate, Hybrid or Certificate and XAuth authentication method, this field displays the certificate that you present to set up the tunnel with this peer, or suggests that you select it from the drop-down list.
If you had opted for the pre-shared key method, this field will not appear.
|Local ID (Optional)||This field represents an IPSec VPN tunnel endpoint, sharing the “secret” or the PSK with the “Peer ID”, the other endpoint. You are represented by the “Local ID”.
Full Qualified Domain Name) or an e-mail address (user@fqdn). This identifier must be in the form of an IP address, a domain name (FQDN:
|Peer ID (Optional)||This field represents an IPSec VPN tunnel endpoint, sharing the “secret” or the PSK with the “Local ID”, the other endpoint. The “Peer ID” represents your peer.
The format is the same as the previous field.
|Pre-shared key (ASCII)||In this field your PSK appears in the format you had selected earlier when creating the peer via the wizard: ASCII or hexadecimal characters (the format can be selected in the checkboxes below the field if you wish to change formats).|
|Edit||This button makes it possible to modify the pre-shared key that was used to set up the IPSec tunnel with this peer.|
|Do not initiate the tunnel (Responder only)||This option is grayed out and validated, as a tunnel to a mobile client with an unknown IP address cannot be set up. In this configuration, the firewall is therefore in “responder only” mode.|
|DPD||This field makes it possible to configure the DPD (Dead Peer Detection) feature on VPNs, This would allow checking whether a peer is still operational.
When DPD is enabled on a peer, requests (R U there) are sent to test the availability of the other peer , which will need to acknowledge the requests in order to confirm its availability (R U there ACK).
These exchanges are secured via ISAKMP (Internet Security Association and Key Management Protocol) SAs (Security Associations).
If it is detected that a peer is no longer responding, the negotiated SAs will be destroyed.
Four choices are available for configuring DPD:
The value delay defines the period after a response is received before the next request is sent.
The value retry defines the time to wait for a response before sending the request again.
The value maxfail is the number of requests sent without receiving responses before the peer is considered absent.
|DSCP||In this field, you can specify the value of the DSCP field assigned to IKE network packets sent to this peer.
Select one of the proposed values or specify a customized DSCP field (integer between 0 and 63 inclusive).