D-Link NetDefend DFL-CP310 User Manual page 354

Adding and Editing VPN Sites
Table 70: Security Methods Fields
In this field... Do this...
Phase 1
Security Methods Select the encryption and integrity algorithm to use for IKE negotiations:
•
•
Diffie-Hellman Select the Diffie-Hellman group to use:
group
•
•
A group with more bits ensures a stronger key but lowers performanc
Renegoti ate every Type t
is the IKE Phase-1 SA lifeti
A shorter interval ensures higher security,
performance. Therefore, it is recommended to keep th
around its default value.
The default value is 1440 minutes (one day).
Phase 2
Security Methods Select the encryption and integrity algorithm to use
•
•
338
Automatic. The NetDefend firewall automatically selects the
best security methods supported by the site. This is the
default.
A specific algorithm
Automatic. The NetDefend firewall automatically selects a
group. This is the default.
A specific group
he interval in minutes between IKE Phase-1 key negotiations. This
Automatic. The NetDefend firewall automatically selects the
best security methods supported by the site. This is the
default.
A specific algorithm
me.
but impacts heavily on
D-Link NetDefend firewall User Guide
e.
e SA lifetime
for VPN traffic: