Cisco DPC2420 User Manual page 83

Field
Phase 1 encryption
Phase 1 authentication Allows you to select an authentication type for another level of
Phase 1 SA lifetime
Phase 2 encryption
4021194 Rev A
Description
Allows you to select the form of encryption to secure the VPN
connection between endpoints. Select from the following five
encryption types:

DES

3DES

AES-128

AES-192

AES-256
You may choose any encryption type as long as the other end of the
VPN tunnel uses the same method
security. Select one of the following authentication types:

MD5

SHA
You may choose either authentication type as long as the other end of
the VPN tunnel uses the same method
Note: SHA is recommended because it is more secure.
Allows you to enter the number of seconds for an individual rotating
key to last until a re-key negotiation between each endpoint occurs.
Smaller lifetimes are generally more secure since it would give a hacker
a smaller amount of time to try to crack the key. However, key
negotiation does take up bandwidth, so network throughput is
sacrificed with small lifetimes. The default setting is 28,800 seconds.
Allows you to select the form of encryption to secure the VPN
connection between endpoints. Select from the following five
encryption types:

DES

3DES

AES-128

AES-192

AES-256
You may select any form of encryption as long as long as the other end
of the VPN tunnel uses the same method
Note: 3DES encryption is commonly used, but AES is recommended
because it is very difficult to crack.
Configure Advanced Settings
63