CNET CWR-854 User Manual page 37

Phase 1
Negotiation Mode: This negotiation is a main process to build a VPN connection in
-
phase 1.
Encryption Algorithm: There are two encryption algorithm – 3DES and AES128.
-
Authentication Algorithm: There are two authentication algorithm – MD5 and
-
SHA1.
- Key Group: There are three Key groups to be defined – DH1, DH2 and DH5.
Key Life Time: Define the life time for this key.
-
Phase 2
Active Protocol: The ESP protocol is using to build a VPN connection in phase 2
-
- Encryption Algorithm: There are three encryption algorithm – 3DES, AES128 and
Null.
Authentication Algorithm: There are two authentication algorithm – MD5 and
-
SHA1.
Key Life Time: Define the life time for this key.
-
Encapsulation: Show the current encapsulation mode.
-
- Perfect Forward Secrecy (PFS): A key-establishment protocol, used to secure
VPN communications. If one encryption key is compromised only data encrypted
by that specific key is compromised. For perfect forward secrecy (PFS) to exist the
key used to protect transmission of data must not be used to derive any additional
keys. You can turn on this PFS feature.
OK: Click on "OK" to confirm the setting.
-
- Cancel: Click on "Cancel" to skip the setting on this page.
37