Table of Contents
Advertisement
Specifications
APPENDIX A
Packet Encryption
•
DES encryption (56-bit key)
•
Triple DES (EDE-CBC) encryption (168-bit key)
•
Weak and semi-weak keys are automatically discarded
Packet Authentication
•
Keyed MD5™ AH Message Digest Algorithm (RFC 1321)
•
HMAC-MD5 and HMAC SHA-1 (RFC 2104)
User Authentication
•
RADIUS servers (Ascend Access Control™, Security Dynamics ACE/Server Access
Manager, BaySecure™ Access Control, Funk Steel Belted RADIUS Server)
•
CHAP and PAP
•
SecurID™ tokens
Compression
•
Stac™ Lempel-Ziv hardware data compression
Key Management
•
IKE: Key updates configurable starting from 60 seconds (RFC 2409)
•
SKIP: Keys updated every 30 seconds
•
Manual
•
All packet, traffic, and authenticating keys automatically generated
Firewall Integration
•
Bypass mode for non-VPN traffic
Specifications
A-1
Advertisement
Table of Contents
