Panasonic BB-HGW700A Operating Instructions Manual page 95

Phase 1 Setup
Conversion Mode
Life Time
Proposal Entry
Proposal Encryption
Proposal Hash
Proposal DH Group
Phase 2 Setup
Life Time
PFS
Proposal Entry
Proposal Encryption
Proposal Hash
Note
You cannot select NULL for Encryption and None for Hash simultaneously in phase 2.
Set the IKE phase 1 conversion mode to Main or Aggressive. The
key conversion procedure for Aggressive is simpler but security is
slightly reduced.
Set the IKE SA lifetime. The time must be set between 5 minutes and
2400 hours.
Set whether to Enable or Disable this proposal. Proposals that are
disabled will not be proposed.
Set the method of encryption used in phase 1. Select an encryption
method from DES, 3DES, AES (128 bit), AES (192 bit), and AES
(256 bit).
Set the authentication algorithm (hash). Select from MD5 and SHA-
1.
Set the DH (Diffie-Hellman) group used in phase 1. Select between 1
and 2. DH group 2 is has increased security compared to DH group
1, but group 1 is not weak. When the conversion mode is set to
Aggressive, both IPsec devices must have the same DH group set.
Set the IPsec SA lifetime. The time must be set between 5 minutes
and 2400 hours.
Set whether to enable PFS (Perfect Forward Security) in phase 2.
Select from Enable DH Group 2, Enable DH Group 1, and Disable.
When Enable Group 2 is selected, the Diffie-Hellman exchange is re-
performed in phase 2, and DH Group 2 creates a secret shared key.
When Enable Group 1 is selected, the Diffie-Hellman exchange is re-
performed in phase 2, and DH Group 1 creates a secret shared key.
When Disabled is selected, the secret shared key created in phase 1
is used in phase 2. Security is increased when PFS is enabled rather
than disabled.
Set whether to Enable or Disable this proposal. Proposals that have
Disable set will not be proposed.
Set the method of encryption. Select an encryption method from
DES, 3DES, AES (128 bit), AES (192 bit), AES (256 bit) and NULL.
Set the authentication algorithm (hash). Select from MD5, SHA-1,
and None (authentication algorithm not used).
[For assistance, please call: 1-800-272-7033]
Operating Instructions
95