Using An Algorithm Proposal List - D-Link NetDefend DFL-210 User Manual

9.3.7. Pre-shared Keys
There are two types of proposal lists, IKE proposal lists and IPsec proposal lists. IKE lists are used
during IKE Phase-1 (IKE Security Negotiation), while IPsec lists are using during IKE Phase-2
(IPsec Security Negotiation).
Several algorithm proposal lists are already defined by default in NetDefendOS for different VPN
scenarios and user defined lists can be added.
Two IKE algorithm lists and two IPsec lists are already defined by default:
• High
This consists of a more restricted set of algorithms to give higher security. The complete list is
3DES, AES, Blowfish, MD5, SHA1.
• Medium
This consists of a longer set of algorithms. The complete list is 3DES, AES, Blowfish, Twofish,
CAST128, MD5, SHA1.
Example 9.1. Using an Algorithm Proposal List
This example shows how to create and use an IPsec Algorithm Proposal List for use in the VPN tunnel. It will
propose 3DES and DES as encryption algorithms. The hash function SHA1 and MD5 will both be used in order to
check if the data packet is altered while being transmitted. Note that this example does not illustrate how to add
the specific IPsec tunnel object. It will also be used in a later example.
Command-Line Interface
First create a list of IPsec Algorithms:
gw-world:/> add IPsecAlgorithms esp-l2tptunnel
Then, apply the algorithm proposal list to the IPsec tunnel:
gw-world:/> set Interface IPsecTunnel MyIPsecTunnel
Web Interface
First create a list of IPsec Algorithms:
1. Go to Objects > VPN Objects > IPsec Algorithms > Add > IPsec Algorithms
2. Enter a name for the list, for example esp-l2tptunnel
3. Now check the following:
• DES
• 3DES
• SHA1
• MD5
4. Click OK
Then, apply the algorithm proposal list to the IPsec tunnel:
1. Go to Interfaces > IPsec
2. Select the target IPsec tunnel
3. Select the recently created esp-l2tptunnel in the IPsec Algorithms control
4. Click OK
DESEnabled=Yes DES3Enabled=Yes
SHA1Enabled=Yes MD5Enabled=Yes
IPsecAlgorithms=esp-l2tptunnel
361
Chapter 9. VPN