D-Link NetDefendOS User Manual page 765

sends to the server. This list details the protocols and encryption methods it can support. The
purpose of the algorithm list is that the client is trying to find a matching set of
protocols/methods supported by the server. The server examines the list and attempts to find a
combination of the protocols/methods sent by the client which it can support. This matching
process is one of the key purposes of the IKE exchange.
Received IKE packet from 192.168.0.10:500 Exchange type :
Identity Protection (main mode) ISAKMP Version : 1.0
Flags :
Cookies : 0x6098238b67d97ea6 -> 0x00000000
Message ID : 0x00000000
Packet length : 324 bytes
# payloads : 8
Payloads:
SA (Security Association)
Payload data length : 152 bytes
DOI : 1 (IPsec DOI)
Proposal 1/1
Protocol 1/1
Protocol ID
SPI Size
Transform 1/4
Transform ID
Encryption algorithm
Key length
Hash algorithm
Authentication method
Group description
Life type
Life duration
Life type
Life duration
Transform 2/4
Transform ID
Encryption algorithm
Key length
Hash algorithm
Authentication method
Group description
Life type
Life duration
Life type
Life duration
Transform 3/4
Transform ID
Encryption algorithm
Hash algorithm
Authentication method
Group description
Life type
Life duration
Life type
Life duration
Transform 4/4
Transform ID
Encryption algorithm
Hash algorithm
Authentication method
Group description
Life type
Life duration
Life type
Life duration
VID (Vendor ID)
Payload data length : 16 bytes
Vendor ID : 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b
Description : SSH Communications Security QuickSec 2.1.0
VID (Vendor ID)
Payload data length : 16 bytes
Vendor ID : 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 c0 d0
Description : draft-stenberg-ipsec-nat-traversal-01
VID (Vendor ID)
Payload data length : 16 bytes
Vendor ID : 61 05 c4 22 e7 68 47 e4 3f 96 84 80 12 92 ae cd
: ISAKMP
: 0
: IKE
: Rijndael-cbc (aes)
: 128
: MD5
: Pre-Shared Key
: MODP 1024
: Seconds
: 43200
: Kilobytes
: 50000
: IKE
: Rijndael-cbc (aes)
: 128
: SHA
: Pre-Shared Key
: MODP 1024
: Seconds
: 43200
: Kilobytes
: 50000
: IKE
: 3DES-cbc
: MD5
: Pre-Shared Key
: MODP 1024
: Seconds
: 43200
: Kilobytes
: 50000
: IKE
: 3DES-cbc
: SHA
: Pre-Shared Key
: MODP 1024
: Seconds
: 43200
: Kilobytes
: 50000
765
Chapter 9: VPN