Table of Contents
Advertisement
SA (Security Association)
IKE Internet Key E change is con gured in t o negotiations.
Phase 1 authenticates the VP
con rming the matching Pre Shared Key ith the t o gate ays.
IPSec is the Phase 2 of the VP process.
Manually con guring a VPN tunnel pro le.
IKE (Phase 1) Proposal
E change: lick the drop do n menu to select the type of
e change
ain ode, Aggressive ode .
DH Group: lick the drop do n menu to select the H group
group 1, group 2, group 5, group 1 .
Encryption: lick the drop do n menu to select the type of
encryption
ES, 3 ES, AES12 , AES192, AES256 .
Authentication: lick the drop do n menu to select the
authentication protocol
5, SHA1 .
Li e Ti e: Enter the life time value for Phase 1. The life time
value should e greater than Phase 2 IPSec . 6
is a common default and is a normal value for Phase 1.
IPSec (Phase 2) Proposal
Protocol: lick the drop do n menu to select the protocol type
ESP, AH
Encryption: lick the drop do n menu to select the type of
encryption
ES, 3 ES, AES12 , AES192, AES256 .
lients to each other y
sec. 1day
Authentication: lick the drop do n menu to select the
authentication protocol
Per ect Forward Secrecy (PFS): Select ena le to ena le PFS. A
fresh H key is generated during IKE phase II and rene ed for
each key e change to eliminate dependencies et een the
keys.
DH Group: lick the drop do n menu to select the H group
group 1, group 2, group 5, group 1 .
Li e Ti e: Enter the life time value for Phase 2. The life time
value should e smaller than Phase 1 IKE . 36
is a common value for Phase 2.
Apply: lick Apply to save the changes.
Cancel: lick Cancel to delete the changes.
1
5, SHA1 .
sec. 1 hour
Advertisement
Table of Contents
