ZyXEL Communications SBG3300-N000 User Manual page 306

Chapter 22 L2TP VPN
Device. The algorithms in red in
based on Table 91 on page
Table 103 Phase 1 IPSec proposals provided by the built-in L2TP client in popular operating systems
(Encryption/Authentication/Key Group)
WINDOWS XP
1 3DES/SHA1/
DH15
2 3DES/SHA1/DH2
3 3DES/MD5/DH2
4 DES/SHA1/DH1
5 DES/MD5/DH1
6
After phase 1 tunnel is established, IPSec phase 2 negotiations begin.
the IPSec phase 2 proposals provided by a built-in L2TP client in the popular operating systems.
The first proposal that can be supported by the phase 2 setting in the Default_L2TPVPN IPSec
VPN rule will be accepted by the Device. The algorithms in red in
the ones that will be accepted based on
Table 104 Phase 2 IPSec proposals provided by the built-in L2TP client in popular operating systems (Tunnel
Mode/Encryption/Authentication) [Encapsulation = Transport]
WINDOWS XP
1 ESP/3DES/MD5
ESP/3DES/SHA1
2 AH/-/SHA1 and
ESP/3DES/-
3 AH/-/MD5 and
ESP/3DES/-
4 AH/-/SHA1 and
ESP/3DES/SHA1
5 AH/-/MD5 and
ESP/3DES/MD5
6 ESP/DES/MD5
ESP/DES/SHA1
306
Table 103 on page 306
286.
WINDOWS VISTA WINDOWS 7
3DES/SHA1/ AES/SHA1/DH15
DH15
3DES/SHA1/DH2 3DES/SHA1/
DH15
3DES/SHA1/DH2
Table 91 on page
WINDOWS VISTA WINDOWS 7
ESP/AES/SHA1 ESP/AES/SHA1
ESP/3DES/SHA1 ESP/3DES/SHA1
AH/-/SHA1 and ESP/DES/SHA1
ESP/AES/-
AH/-/SHA1 and ESP/-/SHA1
ESP/3DES/-
AH/-/SHA1 and AH/-/SHA1
ESP/3DES/SHA1
ESP/-/SHA1
AH/-/SHA1
indicate the ones that will be accepted
IOS 5.1
AES/SHA1/DH2
AES/MD5/DH2
3DES/SHA1/DH2
3DES/MD5/DH2
Table 104 on page 306
Table 104 on page 306
286.
IOS 5.1
ESP/AES/SHA1
ESP/AES/MD5
ESP/3DES/SHA1
ESP/3DES/MD5
SBG3300-N Series User's Guide
ANDROID 4.1
AES/SHA1/DH2
AES/MD5/DH2
3DES/SHA1/DH2
3DES/MD5/DH2
DES/SHA1/DH2
DES/MD5/DH2
lists
indicate
ANDROID 4.1
ESP/AES/SHA1
ESP/AES/MD5
ESP/3DES/SHA1
ESP/3DES/MD5
ESP/DES/SHA1
ESP/DES/MD5