Table of Contents
Advertisement
•
Strong Encrypt and Authenticate (ESP 3DES HMAC SHA-1) is similar to
Strong Encrypt and Authenticate (ESP 3DES HMAC MD5) but uses HMAC
SHA-1 instead of HMAC-MD5.
•
Encrypt for Check Point (ESP DES rfc1829) is interoperable with Check Point
Firewall-1. In Manual Keying mode, Encrypt for Check Point uses 56 bit DES
as specified in RFC 1829 as the encryption method.
•
Encrypt and Authenticate (ESP DES HMAC MD5) uses 56 bit DES encryption
and HMAC MD5 authentication. This method impacts the data throughput of VPN
communications. SonicWALL VPN client software supports this method.
•
Encrypt and Authenticate (ESP DES HMAC SHA-1) similar to MD5 but uses
SHA-1.
•
Authenticate (AH MD5) uses AH to authenticate VPN communications but it
does not encrypt data.
•
Authenticate (AH SHA-1) uses SHA-1 instead of MD5.
•
Authenticate (ESP MD5) does not provide data confidentiality (no data encryp-
tion), but it uses MD5 for authentication.
•
Authenticate (ESP SHA-1) similar to MD5 but uses SHA-1 for authentication.
8. Enter a 16 character hexadecimal key in the Encryption Key field if you are using
DES or ARCFour encryption. Enter a 48 character hexadecimal key if you are using
Triple DES encryption. Enter a 40 character hexadecimal key if you are using SHA-
1. This encryption key must match the remote SonicWALL's encryption key.
Valid hexadecimal characters include 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, a, b, c, d, e, and f.
1234567890abcdef is an example of a valid DES or ARCFour encryption key. If
you enter an incorrect encryption key, an error message is displayed at the bottom
of the browser window.
When a new SA is created, a 48 character key is automatically generated in the
Encryption Key field. This may be used as a valid key for Triple DES. If this key
is used, it must also be entered in the Encryption Key field in the remote
SonicWALL. If Tunnel Only (ESP NULL) or Authenticate (AH MD5) is used,
the Encryption Key field is ignored.
9. Enter a 32 character, hexadecimal key in the Authentication Key field if using
MD5. If uisng SHA-1, enter a 40 character hexadecimal key in the Authentication
Key field.
Valid hexadecimal characters include 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, a, b, c, d, e, and f.
1234567890abcdef1234567890abcdef is an example of a valid authentication key.
If you enter an incorrect authentication key, an error message is displayed at the
bottom of the browser window.
When a new SA is created, a 32 character key is automatically generated in the
Authentication Key field. This key may be used as a valid key. If this key is used,
Page 134 SONICWALL VPN
Advertisement
Table of Contents
