Table of Contents
Advertisement
ESP Encryption
Algorithm
Inbound ESP
Encryption Key
Outbound ESP
Encryption Key
ESP Authentication
Algorithm
Inbound ESP
Authentication Key
Outbound ESP
Authentication Key
Inbound SPI (Hex)
Outbound SPI (Hex)
Select the encryption and authentication algorithms for the VPN
tunnel using the drop-down menu.
•
AES 128-bit - Uses the Advanced Encryption Standard
algorithm with 128-bit (32-character hexadecimal) keys.
•
AES 192-bit - Uses the Advanced Encryption Standard
algorithm with 192-bit (48-character hexadecimal) keys.
•
AES 256-bit - Uses the Advanced Encryption Standard
algorithm with 256-bit (64-character hexadecimal) keys.
Enter a key for inbound traffic. The length of the key is determined
by the selected encryption algorithm. The key must match the
outbound key at the remote gateway.
Define a key for outbound traffic. The length of the key is
determined by the selected encryption algorithm. The key must
match the inbound key at the remote gateway.
This option is available only when
selected for the ESP type. Options include:
•
SHA1 - Enables Secure Hash Algorithm 1, which requires
160-bit (40-character hexadecimal) keys.
Define a key for computing the integrity check on the inbound
traffic with the selected authentication algorithm. The key must be
32/40 hexadecimal (0-9, A-F) characters in length. The key must
match the corresponding outbound key on the remote security
gateway.
Enter a key for computing the integrity check on outbound traffic
with the selected authentication algorithm. The key must be 32/40
hexadecimal (0-9, A-F) characters in length. The key must match
the corresponding inbound key on the remote security gateway.
Define an (up to) six-character (maximum) hexadecimal value to
identify the inbound security association created by the encryption
algorithm. The value must match the corresponding outbound SPI
value configured on the remote security gateway.
Enter an (up to) six-character (maximum) hexadecimal value to
identify the outbound security association created by the
encryption algorithm. The value must match the corresponding
inbound SPI value configured on the remote security gateway.
Configuring Access Point Security
ESP with Authentication
6-31
was
Advertisement
Table of Contents
