Configuring Advanced Branch Office Setup; Figure 76 Vpn Branch Office Advanced Rule Setup - Nortel BSR222 Configuration

Chapter 13 VPN 241
This can be unnecessary for data that does not require such security, so PFS is
disabled (None) by default in the Business Secure Router. Disabling PFS means
new authentication and encryption keys are derived from the same root secret
(which can have security implications in the long run) but allows faster SA setup
(by bypassing the Diffie-Hellman key exchange).

Configuring advanced Branch office setup

Select one of the VPN rules in the VPN Summary screen and click Edit to
configure the rule's settings. The basic IKE rule setup screen displays.
In the VPN Branch Office Rule Setup screen, click the Advanced button to
display the VPN Branch Office Advanced Rule Setup screen.

Figure 76 VPN Branch Office advanced rule setup

Nortel Business Secure Router 222 Configuration — Basics