Ike Settings - IBM TS3100 Setup, Operator, And Service Manual

Table 5-15. IKE settings (continued)
Name of setting
Encryption Algorithm
Pseudo Random Function
DH Group
Authentication Method
Library Authentication ID
Available Values
v AES
v DES
v 3DES
v AES XCBC
v MD5
v SHA1
v 1 (768 Bit)
v 2 (1024 Bit)
v 5 (1536 Bit)
v 24 (2048 Bit)
v PSK v ASCII
v HEX
RSA
v All
v IPv6 Address
v FQDN
v E-Mail-Address
Comments
Choose one of 3 values.
Choose one of 3 values.
Choose one of 4 values.
This mode uses a password with a
maximum length of 32 characters but
can be shorter.
v ASCII Mode
The PSK is inserted as a normal
string: "TOPSECRETKEY".
v Hex Mode
The PSK is inserted in hexadecimal
string. Every character is represented
in 2 hex digits:
544F505345435245544B4559
T O P S E C R E T K E Y
With this mode binary PSKs can be
entered.
The RSA authentication is based on
certificates which have to uploaded to
the unit before this mode can be used.
Because of memory limitations only
one set of certificates can be used. To
enable RSA four different certificate
files have to be loaded.
Note: Refer to 8. Certificate Upload.
ID value which is compared against
the peer ID.
v All
Any peer ID will be accepted.
v IPv6 Address
Peer IP address is compared.
v FQDN
Peers FQDN ID is compared.
v E-Mail Address
Peers E-Mail Address will be
compared.
Chapter 5. Operations
5-61