Using An Algorithm Proposal List - D-Link NetDefendOS User Manual

Network security firewall

Hide thumbs Also See for NetDefendOS:

Table of Contents

This consists of the following, longer list of algorithms that provide less security but greater

compatibility with older endpoint devices:

Example 9.1. Using an Algorithm Proposal List

This example shows how to create and use an IPsec Algorithm Proposal List for use in the VPN

tunnel. The 3DES and AES will be proposed as encryption algorithms. The hash functions SHA256

and SHA512 will be proposed for checking if the data packet is altered while being transmitted.

Note that this example does not illustrate how to add the specific IPsec tunnel object. It will also

be used in a later example.

Command-Line Interface

First create a list of IPsec Algorithms:

gw-world:/> add IPsecAlgorithms esp-l2tptunnel

Then, apply the algorithm proposal list to the IPsec tunnel:

gw-world:/> set Interface IPsecTunnel MyIPsecTunnel

Web Interface

First create a list of IPsec Algorithms:

Go to: Objects > VPN Objects > IPsec Algorithms > Add > IPsec Algorithms

Enter a name for the list, for example esp-l2tptunnel

Now check the following:

DES3Enabled=Yes

AESEnabled=Yes

SHA256Enabled=Yes

SHA512Enabled=Yes

IPsecAlgorithms=esp-l2tptunnel

Chapter 9: VPN

Show Quick Links

Table of Contents

Troubleshooting