Manual Key List; Manual Key Options - Fortinet FortiGate FortiGate-1000A Administration Manual

VPN

Manual key list

Manual key options

FortiGate-1000A/FA2 Administration Guide
2 Follow the guidelines in these sections:
• "Manual key list" on page 271
• "Manual key options" on page 271
Figure 133:IPSec VPN Manual Key list
Create New
Remote Gateway
Encryption
Algorithm
Authentication
Algorithm
Delete and Edit
icons
VPN Tunnel Name Type a name for the VPN tunnel.
Local SPI
Remote SPI
Remote Gateway
Encryption
Algorithm
Select Create New to create a new manual key configuration.
The IP address of the remote peer or client.
The names of the encryption algorithms used in the configuration.
The names of the authentication algorithms used in the configuration.
Delete or edit a manual key configuration.
Type a hexadecimal number (up to 8 characters, 0-9, a-f) that represents
the SA that handles outbound traffic on the local FortiGate unit. The valid
range is from 0xbb8 to 0xffffffff. This value must match the Remote
SPI value in the manual key configuration at the remote peer.
Type a hexadecimal number (up to 8 characters, 0-9, a-f) that represents
the SA that handles inbound traffic on the local FortiGate unit. The valid
range is from 0xbb8 to 0xffffffff. This value must match the Local
SPI value in the manual key configuration at the remote peer.
Type the IP address of the public interface to the remote peer. The
address identifies the recipient of ESP datagrams.
Select one of the following symmetric-key encryption algorithms:
• DES-Digital Encryption Standard, a 64-bit block algorithm that uses a
56-bit key.
• 3DES-Triple-DES, in which plain text is encrypted three times by three
keys.
• AES128-A 128-bit block algorithm that uses a 128-bit key.
• AES192-A 128-bit block algorithm that uses a 192-bit key.
• AES256-A 128-bit block algorithm that uses a 256-bit key.
01-28011-0254-20051115
Manual key
271