Table of Contents
Advertisement
Mode
Peer ID
Key Lifetime (main) The rekey-renegotiated period of the IKE Phase1 keying
Proposal (main)
Select from Main mode and Aggressive mode. The ultimate
outcome is to exchange security proposals to create a protected
secure channel. Main mode is more secure than Aggressive
mode since more exchanges are done in a secure channel to set
up the IPSec session. However, the Aggressive mode is faster.
The default value in Vigor router is Main mode.
In Aggressive mode, Peer ID is on behalf of the IP address
while identity authenticating with remote VPN server. The
length of the ID is limited to 47 characters.
channel of a connection. The acceptable range is from 5 to 480
minutes (8 hours).
The proposed encryption and/or authentication algorithms for
IKE Phase1 negotiation. There are several proposals offered in
this page with combination of three types of algorithms:
Encryption algorithms - DES/3DES/AES
Authentication algorithms - MD5/SHA1
DH (Diffie-Hellman) Group -
MODP768/MODP1024/MODP1536.
164
Vigor3300V+ Series User's Guide
Advertisement
Table of Contents
