Cisco RV220W User Manual page 72

Advanced
Aggressive Mode
Compress
AH Hash Algo-
rithm
NetBIOS broadcast
Dead Peer Detec-
tion
•
PreShared Key
IKE uses the Pre-shared Key field to authenticate the remote
IKE peer. Both characters and hexadecimal values are accept-
able in this field. e.g. "My_@123" or "0x4d795f40313233"
Note that both sides must use the same Pre-shared Key.
There are two types of Phase 1 exchanges: Main mode and Aggres-
sive mode. Aggressive Mode requires half of the main mode
messages to be exchanged in Phase 1 of the SA exchange. If net-
work security is preferred, select Main mode. When users select the
Dynamic IP in Remote Security Gateway Type, it will be limited as
Aggressive Mode.
The router supports IP Payload compression Protocol. IP Payload
Compression is a protocol to reduce the size of IP datagrams. If
Compress is enabled, the router will propose compression when
initiating a connection. If the responders reject this propose, the
router will not implement the compression. When the router works
as a responder, the router will always accept compression even
without enabling compression.
AH (Authentication Header) protocol describes the packet format
and the default standards for packet structure. With the use of AH as
the security protocol, protected is extended forward into IP header
to verify the integrity of the entire packet by use of portions of the
original IP header in the hashing process. There are two algorithms,
MD5 and SHA1. MD5 produces a 128-bit digest to authenticate
packet data and SHA1 produces a 160-bit digest to authenticate
packet data. Both sides of tunnel should use the same algorithm.
Check the box to enable NetBIOS traffic to pass through the VPN
tunnel. By default, the router blocks these broadcasts.
When DPD is enabled, the router will send the periodic
HELLO/ACK messages to prove the tunnel liveliness when both
peers of VPN tunnel provide DPD mechanism. Once a dead peer
detected, the router will disconnect the tunnel so the connection can
be re-established. The Interval is the number of seconds between
DPD messages. The default is DPD enabled, and default Interval is
10 seconds.
70