Table of Contents
Advertisement
168
VPN advanced configuration
Variable
Authentication Key
IPSec Encryption
Encryption Keys 1, 2, and 3
Outgoing SPI
Incoming SPI
Anti Replay
IKE pre-shared secret configuration parameters
The following section describes the parameters for configuration of IKE preshared secret located
at
Configuration, VPN, VPN Settings, IKE Pre-shared Secret tab
Variable definitions
The following table describes the variables and values for configuring IKE preshared secret.
Variable
Policy Action
Policy Name
Existing Policies
Interface Name
Policy Status
NN47928-500
NN47928-500
Value
Type the IPSec Authentication Key.
Select the IPSec Encryption. Select one of the following options:
•
Data Encryption Standard (DES) – is a standard for encrypting data
that uses a 64 bit key to encrypt data, but only 56 bits are usable. This
standard is considered inadequate for data protection as this standard
do not match the speed of computer.
•
Triple Data Encryption Standard (3DES) – processes each block of
data using a different key each time resulting in a significantly more
secure message.
•
Advanced Encryption Standard (AES128, AES192, AES256) – has a
fixed block size of 128 bits and a key size of 128, 192 or 256 bits. Due
to the fixed block size of 128 bits, AES operates on a 4x4 array of
bytes.
The encryption key settings depend on the selected IPSec Encryption:
•
DES - specify a key for Encryption Key 1 only, length 16
•
3DES - specify encryption keys 1, 2, and 3
•
AES 128 - specify a key for Encryption Key 1 only, length 32
•
AES 192 - specify a key for Encryption Key 1 only, length 48
•
AES 256 - specify a key for Encryption Key 1 only, length 64
Type the security parameter index for the outgoing traffic.
Type the security parameter index for the incoming traffic.
Specifies the anti-replay functionality of the security protocol. Select one of
the following:
•
ENABLE - activates the anti-replay functionality of the security
protocol.
•
DISABLE - deactivates the anti-replay functionality of the security
protocol.
The default is ENABLE.
Value
Select this check box to create a policy action.
Type a IPsec policy name. Each policy must have a unique name.
Select an existing policy for the IPsec policy.
Select the name of the interface for which you want to apply the policy.
Type the status of the IPsec policy.
.
Advertisement
Table of Contents
