Linksys LRT224 User Manual page 60

Linksys
• IKE with Preshared Key
Enter the settings for IKE with preshared key mode. Be sure to enter the same
settings when configuring the other end router for this tunnel.
Phase 1 / Phase 2 Allows users to select Diffie-Hellman groups: Group 1/
DH Group: Group 2/ Group 5. DH is a key exchange protocol.
Phase 1 / Phase 2 Allows users to set this VPN tunnel to use any encryption
Encryption: mode. Note that this parameter must be identical to
that of the remote encryption parameter: DES (64-bit
encryption mode), 3DES (128-bit encryption mode),
AES (the standard of using security code to encrypt
information). It supports 128-bit, 192-bit, and 256-bit
encryption keys.
Phase 1 / Phase 2 Allows users to set this VPN tunnel to use any
Authentication: authentication mode. Note that this parameter must
be identical to that of the remote authentication mode:
"MD5" or "SHA1".
Phase 1 / Phase 2 The lifetime for this exchange code is set to 28,800
SA Life Time: seconds (8 hours) by default. This allows the automatic
generation of other exchange passwords within the
valid time of the VPN connection to guarantee security.
Perfect Forward
Check to enable perfect forward secrecy (PFS) The Phase
Secrecy: 2 shared key generated during the IKE coordination will
conduct further encryption and authentication. When
PFS is enabled, hackers using brute force to capture the
key will not be able to get the Phase 2 key in such a short
period of time.
The function is checked by default.
Preshared Key:
For the Auto (IKE) option, enter a password of any digit
or characters in the text of Pre-shared Key, and the
system will automatically translate what users entered
as exchange password and authentication mechanism
during the VPN tunnel connection. This exchange
password can be up to 30 characters.
M i n i m u m Check the box to enable Minimum Preshared Key
Preshared Key Complexity.
Complexity:
Preshared Key Check the Minimum Pre-shared Key Complexity box
Strength Meter: and a strength meter will appear.
Advanced (Only for IKE with Preshared Key mode)
•
You can click Advanced+ to configure advanced settings for IKE with Preshared
key mode. To hide the settings, please click Advanced-.
VPN
56