Netopia 2200 User Manual

Page 324

Advertising
background image

324

Soft MBytes. Setting the Soft MBytes parameter forces the renegotiation of
the IPSec Security Associations (SAs) at the configured Soft MByte value.
The value can be configured between

1 and 1,000,000 MB and refers to data

traffic passed. If this value is not achieved, the Hard MBytes parameter is
enforced.

Soft Seconds. Setting the Soft Seconds parameter forces the renegotiation
of the IPSec Security Associations (SAs) at the configured Soft Seconds
value. The value can be configured between 60 and 1,000,000 seconds.

SPI . The Security Parameter Index is an identifier for the encryption and
authentication algorithm and key. The SPI indicates to the remote firewall
the algorithm and key being used to encr ypt and authenticate a packet. It
should be a unique number greater than 255.

SSL. Secure Sockets Layer. A protocol developed by Netscape for transmit-
ting private documents via the Internet. SSL uses a cr yptographic system
that uses two keys to encr ypt data: a public key known to ever yone and a
private or secret key known only to the recipient of the message.

STATEFUL. The Netopia Gateway monitors and maintains the state of any
network transaction. In terms of network request-and-reply, state consists of
the source IP address, destination IP address, communication por ts, and
data sequence. The Netopia Gateway processes the stream of a network
conversation, rather than just individual packets. It verifies that packets are
sent from and received by the proper IP addresses along the proper commu-
nication por ts in the correct order and that no imposter packets interrupt
the packet flow. Packet filtering monitors only the por ts involved, while the
Netopia Gateway analyzes the continuous conversation stream, preventing
session hijacking and denial of ser vice attacks.

static route. Route entered manually in a routing table.

subnet mask. A 32-bit address mask that identifies which bits of an IP
address represent network address information and which bits represent
node identifier information.

synchronous communication. Method of data communication requiring
the transmission of timing signals to keep peers synchronized in sending
and receiving blocks of data.

Advertising