About Ipsec Tunnels - Netopia R6100 Reference Manual

15-8 User's Reference Guide
MS-CHAP V2 and strong encryption
Notes:
The Netopia R6000 Series supports 128-bit ("strong") encryption. If the router you are connecting to does
not support 128-bit encryption the Netopia Router will default to 40-bit encryption.
Unlike MS-CHAP version 1, which supports one-way authentication, MS-CHAP version 2 supports mutual
authentication between connected routers and is incompatible with MS-CHAP version 1 (MS-CHAP-V1).
When you choose MS-CHAP as the authentication method for the PPTP tunnel, the Netopia Router will start
negotiating MS-CHAP-V2. If the router you are connecting to does not support MS-CHAP-V2, it will fall back
to MS-CHAP-V1, or, if the router you are connecting to does not support MPPE at all, the PPP session will
be dropped.

About IPsec Tunnels

IPsec stands for IP Security, a set of protocols that supports secure exchange of IP packets at the IP layer.
IPsec is deployed widely to implement Virtual Private Networks (VPNs).
IPsec supports two encryption modes: Transport and Tunnel. Transport mode encrypts only the data portion
(payload) of each packet, but leaves the header untouched. The more secure Tunnel mode encrypts both the
header and the payload. On the receiving side, an IPsec-compliant device decrypts each packet. Netopia
Routers support the more secure Tunnel mode.
DES stands for Data Encryption Standard, a popular symmetric-key encryption method. DES uses a 56-bit key.
Netopia R6000 Series Routers offer IPsec DES encryption over the VPN tunnel. The optional VPN Accelerator
(TER/VPN1) increases the level of encryption by offering 3DES (Triple-DES) encryption for VPN tunnel
Connection Profiles. It also accelerates PPTP MMPE, ATMP DES, and PPP LZS.
IPsec tunnels are defined in the same manner as PPTP tunnels. You configure the Connection Profile as follows.
From the Main Menu navigate to WAN Configuration and then Add Connection Profile.
Main
Menu
Configuration
WAN
Add Connection
Profile