NETGEAR FVL328 Reference Manual page 78

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual
Table 6-1. VPN Manual Policy Configuration Fields
Field
Authenticating Header
(AH) Configuration
SPI - Incoming
SPI - Outgoing
Enable Authentication
Authentication
Algorithm
Key - In
Key - Out
Encapsulated Security
Payload (ESP)
Configuration
SPI - Incoming
6-12
Description
AH specifies the authentication protocol for the VPN header. These settings
must match the remote VPN endpoint.
Note: The "Incoming" settings must match the "Outgoing" settings on the
remote VPN endpoint, and the "Outgoing" settings must match the "Incoming"
settings on the remote VPN endpoint.
Enter a Hex value (3 - 8 chars). Any value is acceptable, provided the remote
VPN endpoint has the same value in its "Outgoing SPI" field.
Enter a Hex value (3 - 8 chars). Any value is acceptable, provided the remote
VPN endpoint has the same value in its "Incoming SPI" field.
Use this check box to enable or disable AH. Authentication is often not used,
so you can leave the check box unselected.
If you enable AH, then select the authentication algorithm:
• MD5 – the default
• SHA1 – more secure
Enter the keys in the fields provided. For MD5, the keys should be 16
characters. For SHA-1, the keys should be 20 characters.
Enter the keys.
• For MD5, the keys should be 16 characters.
• For SHA-1, the keys should be 20 characters.
Any value is acceptable, provided the remote VPN endpoint has the same
value in its Authentication Algorithm "Key - Out" field.
Enter the keys in the fields provided.
• For MD5, the keys should be 16 characters.
• For SHA-1, the keys should be 20 characters.
Any value is acceptable, provided the remote VPN endpoint has the same
value in its Authentication Algorithm "Key - In" field.
ESP provides security for the payload (data) sent through the VPN tunnel.
Generally, you will want to enable both encryption and authentication. when
you use ESP. Two ESP modes are available:
• Plain ESP encryption
• ESP encryption with authentication
These settings must match the remote VPN endpoint.
Enter a Hex value (3 - 8 chars). Any value is acceptable, provided the remote
VPN endpoint has the same value in its "Outgoing SPI" field.
M-10144-01
Virtual Private Networking