Tenda W15E User Manual page 106

Key Negotiation Method – Auto Negotiation
In this mode, the negotiation process undergoes two periods.
In period 1, both peers negotiate and exchange security proposals such as authentication algorithm and
encryption algorithm, and establish one ISAKMP SA for further information exchange in period 2.
In period 2, IPSec SA is established using the negotiation parameters for security protocols of IPSec based on the
ISAKMP SA established in period 1 to protect the communication data.
 ISAKMP: Internet Association and Key Management Protocol.
SA: Security Association.

IKE: Internet Key Exchange.

Description of advanced IPSec tunnel parameters
To access the page, click
Parameter description
Parameter
Mode
Encryption
Advanced...
Description
It specifies the exchange mode in period 1, which should be same as the peer router.
Two modes are supported.
MAIN: This mode provides identity protection for both peers, which is applicable to

scenarios with heavy identity protection demands. In this mode, packets are
exchanged frequently.
AGGRESSIVE: This mode does not provide identification protection, which is applicable

to scenarios with low demand on this. In this mode, less packets are exchanged but
negotiation is fast.
It specifies the encryption algorithm applied to IKE sessions.
95