Draytek VIGOR 3300 User Manual page 102

Proposal (quick)
Accepted Proposal
PFS
Status
Delay
Timeout
After finish the configuration, click Apply to apply the IPSec policy setting into the
policy table.
Significant fields will be summarized in the IPSec Table. Operational Status reflects
the current status of the tunnel. UP means the IPSec tunnel has been established.
DOWN means no tunnel existing, or termination status of the tunnel.
98
The proposed encryption and/or authentication algorithms for
IKE Phase2 negotiations. There are 2 options.
Encryption algorithms –NULL/DES/3DES/AES.
Authentication algorithms - MD5/SHA1
If you choose Only accept proposal listed above, only the
selected proposal will be accepted and applied by this device.
If you choose Accecpt all supported proposal, all the
proposals supported by this device will be accepted and applied.
Enables the PFS (Perfect Forward Secrecy) function. A new
Diffie-Hellman Key Exchange is included every time an
encryption and/or authentication key are computed on PFS.
Enables or Disables the dead peer detection function.
The keep-alive timer. A Hello message will be emitted
periodically when a tunnel is idle. Use the value 0 to disable this
function. The recommended value is 30 seconds if enabled.
The timeout timer. The peer will be declared dead once no
acknowledge message is received after timeout value. Use the
value 0 to disable this function. The recommended value is 120
seconds if enabled.
Vigor3300 Series User's Guide