Delta DX-3001H9-V User Manual page 48

Name
Input the name of IPSec connection, it cannot be repeated with other
connection's name. Name can be up to 20 characters long.
Enable
Enable or disable this connection.
IPSec Type
Set up the working mode of the IPSec, currently support "Net to Net" only
IPSec Role
Set up the role of the router in IPSec, currently support "Client" only
Local WAN Interface
Local end WAN interface, system will auto assign it base on connection status
Peer WAN Address
IP/domain name of end opposite
Local Subnet
IPSec local protects subnet and subnet mask, i.e. 192.168.1.0/24
Peer Subnet
IPSec opposite end protects subnet and subnet mask, i.e.192.168.7.0/24;
Local ID
Local end identification, IP and domain name are available
Peer ID
Opposite end identification, IP and domain name are available
IKE Encryption
IKE phase encryption mode. Options are "3DES", "DES", "AES(128bit)" and
"AES(256bit)"
IKE Integrity
IKE phase integrity solution. Options are "MD5","SHA1" and "SHA2(256)"
IKE DH Group
DH exchange algorithm. Options are "Group1(768)", "Group2(1024)" ,
"Group5(1536)", "Group14(2048) ", "Group15(3072)", "Group16(4096)",
"Group17(6144)" and "Group18(8192)"
IKE Lifetime
Set IKE life time, current unit is second, range is 120~86400s
ESP Encryption
ESP phase encryption mode. Options are "3DES", "DES", "AES(128bit)" and
"AES(256bit)"
ESP Integrity
ESP phase integrity solution. Options are "MD5" and "SHA1"
PFS
Enable or disable PFS(Perfect Forward Secrecy)
Description
Cha p ter 3 F unc tio ns
Default
False
Net-to-Net
Client
WAN
3DES
MD5
Group2(1024)
120
3DES
MD5
Enabled
_3
3 - 2 9