Gre - Sierra Wireless AirLink ES440 User Manual

ALEOS 4.4.0 Software Configuration User Guide
Field
Perfect Forward
Secrecy
IPsec Encryption
Algorithm
IPsec Authentication
Algorithm
IPsec Key Group
IPsec SA Life Time
Additional Remote Subnets
Remote Subnet 2
Address type
Remote Subnet 2
Address
Remote Subnet 2
Address - Netmask
Remote Subnet 3
Address type
Remote Subnet 3
Address
Remote Subnet 3
Address - Netmask
134
Description
Provides additional security through a DH shared secret value. When this feature is
enabled, one key cannot be derived from another. This ensures previous and subsequent
encryption keys are secure even if one key is compromised. Options are: Yes (default) or
No.
Determines the type and length of encryption key used to encrypt/decrypt ESP
(Encapsulating Security Payload) packets. 3DES supports 168-bit encryption. AES
(Advanced Encryption Standard) supports both 128-bit and 256-bit encryption.
Options are: None, DES, 3DES, AES-128 (default), and AES-256.
Can be configured with MD5 or SHA1. MD5 is an algorithm that produces a 128-bit digest
for authentication. SHA is a more secure algorithm that produces both 160-bit (SHA1) and
256-bit (SHA256) digests.
Options are: None, MD5, SHA1 (default), and SHA 256.
Determines how the AirLink Device VPN creates an SA with the VPN server. The DH
(Diffie-Hellman) key exchange protocol establishes pre-shared keys during the phase 1
authentication. The AirLink Device supports three prime key lengths, including Group 1
(768 bits), Group 2 (1,024 bits), and Group 5 (1,536 bits). Options are: None, DH1, DH2
(default), or DH5.
Determines how long the VPN tunnel is active in seconds
Options are: 180 to 86400; Default: 7200
The network information for subnet 2 IPsec server behind the IPsec gateway.
Options are: Subnet Address (default) and Single Address
The IP address for the subnet 2 device behind the gateway
Remote subnet 2 mask information. 24-bit netmask
Default: 255.255.255.0
The network information for subnet 3 IPsec server behind the IPsec gateway.
Options are: Subnet Address (default) and Single Address
The IP address for the subnet 3 device behind the gateway
Remote subnet 3 mask information. 24-bit netmask
Default: 255.255.255.0

GRE

The AirLink Device can act as a Generic Routing Encapsulation (GRE) endpoint,
providing a means to encapsulate a wide variety of network layer packets inside
IP tunneling packets. With this feature you can reconfigure IP architectures
without worrying about connectivity. GRE creates a point-to-point link between
routers on an IP network.
4116359