D-Link DSL-G2452GR User Manual page 83

Section 4 - Configuration
The Second Phase
Encryption mode
Select the encryption mode to use. The default is
CBC.
Second phase
Choose the encryption algorithm to use for the
encryption
second phase.
algorithm
Hashing mode
Choose the hashing mode to use for the second phase.
Size of hash
Select the hash size to use.
Hashing algorithm Select the hash function to use from MD5, SHA1,
and SHA2 (recommended).
Enable PFS Toggle this switch to enable Perfect Forward Secrecy
for the second phase.
Second phase Specify the DHgroup type for the second phase from
DHgroup type the drop-down list.
IPsec-SA lifetime Enter a value between 60 and 864000 seconds.
D-Link DSL-G2452GR User Manual 79