Table of Contents
Advertisement
60
VPN configuration
22
23
24
25
26
27
Variable definitions
The following table describes the variables and values for configuring client termination.
Variable
Policy Action
Policy Name
Existing Policies
Interface Name
Policy Status
Policy Type
IKE Phase 1 Proposal table
IPSec Encryption
NN47928-500
NN47928-500
From the Encryption list, select an IPSec encryption.
From the Authentication list, select the preferred authentication method.
From the Preferred Forward Secrecy list, select a PFS option.
From the Life Time list, select the Seconds, Minutes, or Hours.
In the Life Time Value field, enter the life time value.
Click Apply.
Value
Select this check box to create a policy action.
Type a IPsec policy name.
Each policy must have a unique name.
The range is 1 to 63 characters.
Policy name ALL is not allowed.
Select an existing policy for the IPsec policy.
Select the WAN interface for which you want to apply the policy.
Select the status of the IPsec policy.
Select INACTIVE to disable the policy on the specified interface.
Select ACTIVE to enable the policy on the specified interface.
The default is INACTIVE.
Select the policy type. Select one of the following:
•
IKE XAUTH
•
IKE Pre-Shared
Select the IPSec Encryption. Select one of the following options:
•
Data Encryption Standard (DES) – a standard for encrypting data that
uses a 64 bit key to encrypt data, but only 56 bits are used. This
standard is considered inadequate for data protection.
•
Triple Data Encryption Standard (3DES) – processes each block of
data using a different key each time, resulting in a significantly more
secure message.
•
Advanced Encryption Standard (AES128, AES192, AES256) – has a
fixed block size of 128 bits and a key size of 128, 192 or 256 bits. Due
to the fixed block size of 128 bits, AES operates on a 4x4 array of
bytes.
Select DES if you require network speed.
Select 3-DES if you require network security.
End
Advertisement
Table of Contents
