Draytek Vigor C410 Series User Manual page 251

Cipher Algorithm
HMAC Algorithm
Certificate
Authentication
Certificate Source
Server CA
Server Certificate
Cancel
Apply
After finishing this web page configuration, please click Apply to save the settings.
Select the desired cipher algorithm. Two encryption algorithms are
supported: AES128, AES192
AES128 but may result in lower performance because it incurs higher
computational overhead.
HMAC stands for Hash-based Message Authentication Code. It is used
to validate the data integrity and authenticity of the VPN data.
Select the desired HMAC hash algorithm. Two hash algorithms, SHA1
and SHA256, are supported. SHA256 is preferred as it is more robust
and reliable than SHA1.
Switch the toggle to enable if you would like to validate that the client
certificate was issued by a trusted CA.
Select a source for the certificate to be used for OpenVPN.
Select from Existing Certificates – Third-party certificates will be
used for OpenVPN.
Router Generate Certificates – Router-generated certificates that
will be used for OpenVPN.
Use the dropdown list to select the trust CA certificate that has
already been uploaded to the router.
To upload more Trusted CA certificates to the router, go to Certificate
Configuration>>Certificates page and click the Trusted CA tab for
obtaining more certificates.
Use the dropdown list to select a server certificate that has already
been uploaded to the router.
To upload more local certificates to the router, go to Certificate
Configuration>>Certificates page and click Local Certificate tab for
obtaining more certificates.
Discard current settings and return to the previous page.
Save the current settings and exit the page.
241
and AES256. AES256 is more secure than