Watchguard Firebox X15 User Manual page 199

To change the Phase 2 settings:
1
Select the authentication method from the Authentication
Algorithm drop-down list.
2
Select the encryption algorithm from the Encryption Algorithm
drop-down list.
3 To use Perfect Forward Secrecy, select the Enable Perfect
Forward Secrecy check box.
This option makes sure that each new key comes from a new Diffie-
Hellman exchange. This option makes the negotiation more secure, but
uses more time and computer resources.
4
Type the number of kilobytes and the number of hours until the
Phase 2 key expires.
To make the key not expire, enter zero (0). For example, 24 hours and
zero (0) kilobytes means that the Phase 2 key is renegotiated each 24
hours no matter how much data
5
the IP address of the local network and the remote
Type
networks that will send encrypted traffic across the VPN.
You must enter network addresses in "slash" notation (also known as
CIDR or Classless Inter Domain Routing notation). For more information
on how to enter IP addresses in slash notation, see this FAQ:
http://www.watchguard.com/support/advancedfaqs/general_slash.asp.
6 Click Add.
Repeat step 5 if you must add additional networks.
User Guide
Manual VPN: Setting Up Manual VPN Tunnels
has passed.
185