10-84 User’s Reference Guide
following section).
Note: The SPI title field above changes to SPI (Security Parameters Index) -- Use Advanced IP Profile Options
if any of the SPI values differ from each other.
AA
AA
dd
dd
vv
vv
aa
aa
nn
nn
cc
cc
ee
ee
dd
dd
II
II
PP
PP
PP
PP
rr
rr
oo
oo
ff
ff
ii
ii
ll
ll
ee
ee
OO
OO
pp
pp
tt
tt
ii
ii
oo
oo
nn
nn
ss
ss
■ You can specify an ESP Receive SPI. The value must be unique over the set of all ESP SPIs specified for
the remote tunnel endpoint.
■ You can specify an ESP Transmit SPI. The value must be unique over the set of all ESP SPIs specified for
the remote tunnel endpoint.
■ You can specify an AH Receive SPI if AH authentication has been requested. The value must be unique
over the set of all AH SPIs specified for the router.
■ You can specify an AH Transmit SPI if AH authentication has been requested. The value must be unique
over the set of all AH SPIs specified for the remote tunnel endpoint.
■ You can specify a Local Tunnel Endpoint Address. If not 0.0.0.0, this value must be one of the assigned
interface addresses, either WAN or LAN. This is used as the source address of all IPsec traffic.
■ You can specify a Next Hop Gateway. If you specify the Remote Tunnel Endpoint Address, and the address
is in the same subnet as the Remote Members Network you specified in the IP Profile Parameters, the
Next Hop Gateway option allows you to enter the address by which the gateway partner is reached.
If you do not specify the Remote Tunnel Endpoint Address, the router will use the default gateway to reach
the partner. If the partner should be reached via an alternate port (for example, the LAN instead of the
WAN), the Next Hop Gateway field allows this path to be resolved.
Advanced IP Profile Options
ESP Receive SPI: 123456789
ESP Transmit SPI: 123456789
AH Receive SPI: 123456789
AH Transmit SPI: 123456789
Local Tunnel Endpoint Address: 0.0.0.0
Next Hop Gateway: 0.0.0.0