Advantech EKI-1334 User Manual page 25

Phase 1 Parameters: configuration parameters during Phase 1 of IPSec negoti-
ation.
IKE Policy: optional between 3DES-MD5-96 and AES-MD5-96, suggest selecting
3DES-MD5-96.
IKE Lifetime: the default is 86400 seconds.
Local ID Type: optional among FQDN, USERFQDN, IP address, suggest selecting IP
address.
Remote ID Type: optional among FQDN, USERFQDN, IP address, suggest selecting
IP address.
Authentication Type: optional between Shared Key and Certificate, generally choose
Shared Key.
Key: set IPSec VPN negotiating key.
Phase 2 Parameters: configuration parameters during Phase 2 of IPSec negoti-
ation.
IPSec Policy: optional between 3DES-MD5-96 and AES-MD5-96, suggest selecting
3DES-MD5-96.
IPSec Lifetime: the default is 3600 seconds.
Perfect Forward Encryption: Optional among None, GROUP1, GROUP2 and
GROUP5. This parameter should match with the server, generally, select "None".
Click "Save" to finish adding IPSec Tunnel:
You can click "Show Detail Status" to observe the specific connection details, or click
"Add" to add a new tunnel.
Now you have successfully built a high-security IPSec tunnel.
And the PC in IPSec client subnet can get access to the server's subnet.
Open command in your PC, then ping a PC in the server's subnet:
17 EKI-1334 User Manual