CNET CWR-901 User Manual page 37

- Tunnel Name: The wireless router can create three simultaneous tunnels, Tunnel
A, Tunnel B and Tunnel C.
- This tunnel: Enable or disable this selected tunnel.
- Local security group: Private network on this VPN router.
- Remote security group: Private network on the remote peer VPN router.
- Remote security gateway: Private network on the remote side security gateway.
Encryption: There are two encryption methods available: 3DES and AES.
-
- Authentication: There are two authentications available: MD5 and SHA1.
Key management:
Pre-shared Key: Pre-shared keys are used for user authentication between a VPN
-
Client and a gateway. IKE (Internet Key Exchange Protocol) will use the Pre-shared
key to authenticate the remote IKE peer.
- Prefect Forward Secrecy: If enabled, IKE Phase 2 negotiation will generate a new
key material for IP traffic encryption and authentication.
- IPSec Key Lifetime: IPSec (IP Security) can support encryption on large networks
by using digital certificates for device authentication. This field allows configuring
the length of time for IPSec Key to be active. The default value is 86400 seconds.
- ISAkmp Key Lifetime: ISAkmp (Internet Security Association and Key
Management Protocol. The basis for IKE. This field allows you to configure the
length of time for ISAkmp Key being active. The default value is 86400 seconds.
Save: Save the parameters.
-
- Cancel: To undo your changes.
- Connect: Start to connect this VPN.
37