Figure 23-9 Menu - ZyXEL Communications ZyXEL ZyWALL 50 User Manual

Phase 1
Phase 2
FIELD
Phase 1
Negotiation Press [SPACE BAR] to choose from Main or Aggressive and then press
Mode [ENTER]. See earlier for a discussion of these modes.
Pre-Shared Key ZyWALL gateways authenticate an IKE VPN session by matching pre-shared
keys. Pre-shared keys are best for small networks with fewer than ten nodes.
Enter your pre-shared key here. Enter up to 31 characters. Any character
may be used, including spaces, but trailing spaces are truncated.
When DES is used for data communications, both sender and receiver must
Encryption
Algorithm know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. ZyWALL
DES encryption algorithm uses a 56-bit key.
Strong Encryption, or Triple DES (3DES), is a variation on DES that uses a
168-bit key. As a result, 3DES is more secure than DES. It also requires more
processing power, resulting in slightly increased latency and decreased
throughput.
Press [SPACE BAR] to choose from 3DES or DES and then press [ENTER].
Authentication MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are hash
l ith
Al ith
VPN/IPSec Setup
Menu 27.1.1.1 - IKE Setup
Negotiation Mode= Main
Pre-Shared Key=
Encryption Algorithm = DES
Authentication Algorithm = SHA1
SA Life Time (Seconds)= 0
Key Group= DH1
Active Protocol = ESP
Encryption Algorithm = DES
Authentication Algorithm
SA Life Time (Seconds)[0: unspecified]= 0
Encapsulation = Tunnel
Perfect Forward Secrecy (PFS)= None
Press ENTER to Confirm or ESC to Cancel:
Figure 23-9
Menu 27.1.1.1
Table 23-5
Menu 27.1.1.1
DESCRIPTION
d t th ti t k t d t
ZyWALL 50 Internet Security Gateway
= SHA1
—
IKE Setup
—
IKE Setup
Th SHA1 l ith i
EXAMPLE
Main
DES
SHA1
ll
23-13