NETGEAR FVS318 - ProSafe VPN Firewall Router Reference Manual page 72

Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall
Figure 6-5: IKE - VPN Settings Manual Key Configuration Menu
The Manual Keys configuration fields are defined in the following table.
Table 6-1. VPN Manual Keys Configuration Fields
Field
Secure Association
Incoming SPI
Outgoing SPI
Encryption Protocol
Key Group
Pre-Shared Key
6-8
Description
Choose Manual Keys key exchange mode for this VPN tunnel:
• IKE Main Mode -- the default.
• IKE Aggressive Mode -- faster but less secure.
• Manual Keys -- more control but more complex.
Incoming Security Parameter Index. Enter a Hex value (3 - 8 chars). This string
should not be used in any other SA. Any value is acceptable, provided the
remote VPN endpoint has the same value in its
Outgoing Security Parameter Index. Enter a Hex value (3 - 8 chars). This string
should not be used in any other SA. Any value is acceptable, provided the
remote VPN endpoint has the same value in its
The level of encryption will you use. Longer keys are more secure but the
throughput could be slower.
• Null - Fastest but no security.
• DES - The Data Encryption Standard (DES) processes input data that is 64
bits wide, encrypting these values using a 56 bit key. Faster but less secure
than 3DES or AES.
• 3DES - (Triple DES) achieves a higher level of security by encrypting the data
three times using DES with three different, unrelated keys.
• AES - 128, - 192, or - 256. Most secure. Advanced Encryption Standard, a
symmetric 128-bit block data encryption technique. It is an iterated block
cipher with a variable block length and a variable key length.
This setting determines the Diffie-Hellman group bit size used in the key
exchange. This must match the value used on the remote gateway.
Specify the key. Any value is acceptable, provided the remote VPN endpoint has
the same value in its Pre-Shared Key field.
M-10146-01
" "
Outgoing SPI field.
" "
Incoming SPI field.
Virtual Private Networking