L2Tp - Caimore CM520-86WG User Manual

Xiamen Caimore Communication Technology Co.,Ltd
2 F, 37#, Wanghai Road, Software Park 2, Xiamen,China (361009)
------------------------------------------------------------------------------
----------------------------------------
default port is 1701.
 IPsec Identity：the identification supplied to the opposite side when connects
negotiation
Phase 1
：establish IPsec SA through consultation in the first stage, and supply IPSec
service for data communication.
 Work Mode：Main and Aggressive mode.
 PFS： Precise forwarding secrecy. Avoid affecting the whole communication
system when single key leaks
Debug： Enable debug information
 NAT Traversal： If this gateway doesn't connect with public network directly,
but transmit through IP original address, please use "NAT Traversal"
 Authentication： Pre-shared Key mode and Certificates X509 mode.
 Cipher ： DES, 3DES, AES and AES128
 Hash ： SHA1 and MD5
 DH group： Group1, Group2, Group5, Group14, Group15, Group16, Group17
and Group18
SA lifetime (s): phase negotiation valid time
 Key： when Pre-shared Key，it is shared key.
 Password： the secret key is the one of certification when the authentication
mode is Certificate X509
Phase 2：
Phase 2 is protected by phase 1, any message that was not protected by
phase 1 SA will be refused. In phase 2, negotiate the communication protocol fast,
changing secret key and establish communication.
DH group： Group1 、Group2 、Group5 、Group14 、Group15 、Group16 、
Group17 and Group18
Lifetime(S): Phase negotiation valid time.
 Cipher： DES, 3DES, AES and AES128
 Hash：SHA1 and MD5
Other
 DPD Timeout(s)： the default time of dps timeout is 120s.
 IPComp: IP Payload Compression Protocol

4.3.4 L2TP

L2TP （Layer Two Tunneling Protocol， the second layer channel protocol） is one
Tel:+86 592 5901215 47 web: en.caimore.com 47