LevelOne FBR-2000 User Manual page 144

2000 VPN Client.
Example 3. Create a VPN connection between two Multi-Homing Gateway using Aggressive
mode Algorithm (3 DES and MD5), and data encryption for IPSec Algorithm (3DES and MD5)
Example 4. Create a VPN connection between two Multi-Homing Gateway using ISAKMP
Algorithm (3DES and MD5), data encryption for IPSec Algorithm (3DES and MD5) and GRE.
The definition of VPN:
IPSec Algorithm: The administrator could fill in the following further settings to setup VPN;
IPSec Lifetime and Perfect Forward Secrecy to enable the Multi-Homing
Gateway select or update randomly the unrecognized AutoKey.
 Preshare Key: The IKE VPN must be defined with a Preshared Key. The Key may be up to
128 bytes long.
ISAKMP Algorithm
Encryption Algorithm: The device selects 56 bit DES-CBC or 168-bit Triple DES-CBC
encryption algorithm. The default algorithm 56 bit DES-CBC.
ESP-Authentication Method: The device -selects MD5 or SHA-1 authentication algorithm.
The default algorithm is MD5.
IPSec Algorithm: The device Select Data Encryption + Authentication or Authentication
Only.
Data Encryption + Authentication
Encryption Algorithm: The device selects 56 bit DES-CBC or 168-bit
or AES or NULL encryption algorithm. The default algorithm is 56 bit DES-CBC.
 ESP-Authentication Method: The device -selects MD5 or SHA-1 authentication algorithm.
The default algorithm is MD5.
 IPSec Lifetime: New keys will be generated whenever the lifetime of the old keys is
exceeded. The Administrator may enable this feature if needed and enter the lifetime in
seconds to re-key. The default is 28800 seconds (eight hours). Selection of small values
could lead to frequent re-keying, which could affect performance.
Keep alive IP : Check to allow Remote Client computer IP Address connected to keep alive.
Aggressive mode: The device Select Aggressive mode Algorithm.
GRE/IPSec: The device Select GRE/IPSec
technology.
(Generic Routing Encapsulation)
- 137 -
Triple DES-CBC
packet seal