3Com 3C13636 Configuration Manual page 1279

3Com Router 3000 Ethernet Family
Configuration Guide
I. Network requirements
As Figure 4-3 shows, Branch A and Branch B establish DVPN connections with the
headquarters respectively. Since the private network of Branch A is connected to the
private network of the headquarters through NAT, DVPN NAT traversal is required.
Detailed configuration requirements are as follows:
Specify to use the default algorithm suite (algorithm suite 1) during registration and
sessions, that is, use DES for encryption, MD5 for authentication, and
DH-GROUP1 for key negotiation.
Specify to perform IPSec encryption on data using algorithm suite 6, that is, use
3DES for encryption, MD5 for authentication, and DH-GROUP2 for key
negotiation.
Note:
Data transmitted over DVPN sessions is IPSec-encrypted by default using algorithm
suite 1. That is, by default, the system uses DES for encryption, MD5 for authentication,
and DH-GROUP1 for key negotiation.
3Com Corporation
4-25
Chapter 4 DVPN