Grandstream Networks GWN7000 User Manual page 91

Encryption Algorithm
Digest Algorithm
TLS Authentication
TLS Pre-Shared Key
Routes
Don't Pull Routes
IP Masquerading
LZO Compression
Allow Peer to Change IP
CA Certificate
Client Certificate
•
SSL + User Auth: Requires both certificate and username
/ password. Each user has a unique client configuration
that includes their personal certificate and key.
Most secure, as there are multiple factors of authentication
(TLS Key and Certificate that the user has, and the
username/password they know).
Choose the encryption algorithm from the drop-down list, in order to
encrypt data so that the receiver can decrypt it using the same
algorithm.
Choose the digest algorithm from the drop-down list, which will
uniquely identify the data to provide data integrity and ensure that
the receiver has an unmodified data from the one sent by the original
host.
This option uses a static Pre-Shared Key (PSK) that must be
generated in advance and shared among all peers.
This feature adds extra protection to the TLS channel by requiring
that incoming packets have a valid signature generated using the
PSK key.
Enter the generated TLS Pre-Shared Key when using TLS
Authentication.
This feature allows specifying and adding custom routes.
If enabled, client will ignore routes pushed by the server.
This feature is a form of network address translation (NAT) which
allows internal computers with no known address outside their
network, to communicate to the outside. It allows one machine to act
on behalf of other machines.
LZO encoding provides a very high compression ratio with good
performance. LZO encoding works especially well for CHAR and
VARCHAR columns that store very long character strings.
Allow remote change the IP and/or Port, often applicable to the
situation when the remote IP address changes frequently.
Click on "Upload" and select the "CA" certificate generated
previously on this guide.
Click on "Upload" and select the "Client Certificate" generated
previously on this guide.
GWN7000 User Manual
Version 1.0.6.28
P a g e |
91