ZyXEL Communications Vantage CNM 2.3 User Manual page 338

Chapter 11 IPSec VPN
Each field is described in the following table.
Table 133 Device Operation > Device Configuration > VPN > IPSec VPN > VPN
Gateway > Edit
LABEL
VPN Gateway
Enable
VPN Gateway
Name
IKE Phase 1
Negotiation
Mode
Proposal
#
Encryption
Authentication
Add icon
338
DESCRIPTION
Select this to activate or clear this to deactivate this VPN gateway.
Type the name used to identify this VPN gateway. You may use 1-31
alphanumeric characters, underscores(
character cannot be a number. This value is case-sensitive.
Select the negotiation mode to use to negotiate the IKE SA. Choices
are
Main - this encrypts the ZyWALL's and remote IPSec router's
identities but takes more time to establish the IKE SA
Aggressive - this is faster but does not encrypt the identities
The ZyWALL and the remote IPSec router must use the same
negotiation mode.
This field is a sequential value, and it is not associated with a specific
proposal. The sequence of proposals should not affect performance
significantly.
Select which key size and encryption algorithm to use in the IKE SA.
Choices are:
DES - a 56-bit key with the DES encryption algorithm
3DES - a 168-bit key with the DES encryption algorithm
AES128 - a 128-bit key with the AES encryption algorithm
AES192 - a 192-bit key with the AES encryption algorithm
AES256 - a 256-bit key with the AES encryption algorithm
The ZyWALL and the remote IPSec router must use the same key
size and encryption algorithm. Longer keys require more processing
power, resulting in increased latency and decreased throughput.
Select which hash algorithm to use to authenticate packet data in
the IPSec SA. Choices are SHA1 and MD5. SHA1 is generally
considered stronger than MD5, but it is also slower.
The remote IPSec router must use the same authentication
algorithm.
This column contains icons to add and remove proposals.
To add a proposal, click the Add icon at the top of the column.
To remove a proposal, click the Remove icon next to the proposal.
The Vantage CNM confirms that you want to delete the proposal
before doing so.
), or dashes (-), but the first
_
Vantage CNM User's Guide