Global VPN Client 5 Administration Guide

Table of Contents

Peer Information Dialog

The Peer Information dialog allows you to add or edit peer information.

  • IP Address or DNS Name ‐ Specifies the peer VPN gateway IP address or DNS name.
  • Use the default gateway as the peer IP address ‐ Specifies the default gateway as the peer IP address. The Global VPN Client gets the default gateway from the routing table.
  • Response Timeout ‐ Specifies the maximum amount of time to wait for a response to a sent packet. After this time expires, the sent packet is considered lost and the packet is retransmitted. The valid range is 1‐10 seconds.
  • Maximum Attempts ‐ Specifies the maximum number of times the same packet is sent before determining that the peer is not responding. The valid range is 1‐10 attempts.
  • Dead Peer Detection ‐ Select from any of the following:

    • Automatic ‐ This is traffic‐based DPD. If GlGlobal VPN Client does not receive response data (one‐way traffic), then Global VPN Client exchanges heartbeat packets to detect if the peer gateway is alive. If there is no heartbeat packet response for the configured number of failed checks in DPD Settings, then Global VPN Client tries to re‐initiate IKE negotiations. This setting is enabled by default.
    • Forced On ‐ Performs DPD periodically. The Global VPN Client exchanges heartbeat packets to detect if the peer gateway is alive. If there is no heartbeat packet response for the configured number of failed checks in DPD Settings, then Global VPN Clienttries to re‐initiate IKE negotiations.
    • Disabled ‐ DPD is disabled. No heartbeat packets are exchanged. This prevents Global VPN Client from detecting when the gateway is unavailable.
  • DPD Settings ‐ Displays the Dead Peer Detection Settings dialog.

    • Check for dead peer every ‐ choose from 3, 5, 10, 15, 20, 25, or 30 seconds.
    • Assume peer is dead after ‐ choose from 3, 4, or 5 Failed Checks.
  • NAT Traversal ‐ Choose one of the following three options:

    • Automatic ‐ Automatically determines whether to use UDP encapsulation of IPsec packets between the peers.
    • Forced On ‐ Forces the use of UDP encapsulation of IPsec packets even when there is no NAPT/NAT device in between the peers.
    • Disabled ‐ Disables use of UDP encapsulation of IPsec packets between the peers.
  • LAN Settings ‐ Displays the LAN Settings dialog for specifying the setting used when this connection is enabled over the LAN.

    Type the IP address in the Next Hop IP Address field to specify the next hop IP address of a different route than the default route. Leaving the setting as zeros instructs the Global VPN Client to use the default route.