Siemens SIMATIC NET SCALANCE SC-600 Configuration Manual page 333

• Authentication
Specify the method for calculating the checksum. Can only be selected if "Default
Ciphers" is disabled.
The following methods are supported:
– MD5
– SHA1
– SHA512
– SHA256
– SHA384
• Key derivation
Select the required Diffie-Hellmann group (DH) from which a key will be generated.
Can only be selected if "Default Ciphers" is disabled.
The following DH groups are supported:
– DH group 1
– DH group 2
– DH group 5
– DH group 14
– DH group 15
– DH group 16
– DH group 17
– DH group 18
• Keying Tries
Enter the number of repetitions for a failed connection establishment. If you enter the
value 0, the connection establishment will be attempted endlessly.
• Lifetime [min]:
Enter a period in minutes to specify the lifetime of the authentication. When the time
has elapsed, the VPN endpoints involved must authenticate themselves with each
other again and generate a new key
• DPD
When enabled, DPD (Dead Peer Detection) is used. Using DPD, it is possible to find
out whether the VPN connection still exists or whether it has aborted.
Note
Sending DPD queries increases the amount of data sent and received. This can lead
to increased costs
• DPD Period [sec]
Enter the period after which DPD requests are sent. These queries test whether or
not the remote station is still available
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
Configuring with Web Based Management
4.7 "Security" menu
333