Digi TransPort WR31 User Manual page 410

Configure Virtual Private Networking (VPN)
RSA Key File
Overrides the private key filename in the IKE configuration. Use only when the authentication
stage of the IKE negotiation uses RSA Signatures (Certificates).
Use enc encryption on this tunnel
The ESP encryption protocol to use with this IPsec tunnel. The options are:
No (None)
•
Null
•
DES
•
3DES
•
AES (128 bit keys)
•
AES (192 bit keys)
•
AES (256 bit keys)
•
If the dropdown options only display None and Null, the router requires encryption enabling.
See your Digi sales contact regarding enabling encryption.
Use auth authentication on this tunnel
The ESP authentication algorithm to use with this IPsec tunnel. The options are:
No (None)
•
MD5
•
SHA1
•
Use Diffie Hellman group
The Diffie Hellman (DH) group to use when negotiating new IPsec SAs. If enabled, the IPsec SA
keys cannot be predicted from any of the previous keys generated. The options are
No PFS, 1, 2, or 3. The larger values result in stronger keys, but they take longer to generate.
Use IKE n to negotiate this tunnel
The IKE version to use to negotiate this IPsec tunnel.
Use IKE configuration
The IKE configuration instance to use with this Eroute when the router is configured as an
Initiator.
Digi TransPort WR Routers User Guide
IPsec parameters
410