D-Link DWR-921 User Manual page 134

DWR-921 4G LTE Router
User Manual
Figure 111. The page for adding an IPsec tunnel. The First Phase / The Second Phase sections.
Parameter
First phase
encryption algorithm
Encryption mode
Hashing algorithm
Size of hash
Hashing mode
First phase DHgroup
type
IKE-SA lifetime
Aggressive Mode
The First Phase
Select an available encryption algorithm from the drop-down list.
Select an encryption mode from the drop-down list.
Select a hashing algorithm from the drop-down list.
The length of the hash in bits.
Select a hashing mode from the drop-down list.
A Diffie-Hellman key group for the First Phase. Select a value from
the drop-down list.
The lifetime of IKE-SA keys in seconds. After the specified period it
is required to renegotiate the keys. The value specified in this field
should be greater than the value specified in the IPsec-SA lifetime
field.
Move the switch to the right to enable the aggressive mode for mutual
authentication of the parties. Such a setting accelerates the connection
establishment, but reduces its security.
Page 134 of 255
Configuring via Web-based Interface
Description