Table of Contents
Advertisement
For Advanced Configuration
Click Advanced tab. This page allows you to set advanced configuration for the
specified policy. The following page of default configuration will be shown:
Mode
Peer ID
Key Lifetime (main) The renegotiated period of the IKE Phase1 keying channel of a
Proposal (main)
Select from Main mode and Aggressive mode. The ultimate
outcome is to exchange security proposals to create a protected
secure channel. Main mode is more secure than Aggressive
mode since more exchanges are done in a secure channel to set
up the IPSec session. However, the Aggressive mode is faster.
The default value in Vigor router is Main mode.
In Aggressive mode, Peer ID is on behalf of the IP address
while identity authenticating with remote VPN server. The
length of the ID is limited to 47 characters.
connection. The acceptable range is from 5 to 480 minutes (8
hours).
The proposed encryption and/or authentication algorithms for
IKE Phase1 negotiation. There are several proposals offered in
this page with combination of three types of algorithms:
Encryption algorithms - DES/3DES/AES
Authentication algorithms - MD5/SHA1
DH (Diffie-Hellman) Group -
MODP768/MODP1024/MODP1536.
170
Vigor3300V+ Series User's Guide
Advertisement
Table of Contents
