Linksys LRT214 User Manual page 60

Linksys
Enter the settings for IKE with preshared key mode . Be sure to enter the same
settings when configuring the other end router for this tunnel .
Phase 1 / Phase 2 Allows users to select Diffie-Hellman groups: Group 1/
Group 2/ Group 5 . DH is a key exchange protocol .
DH Group:
Phase 1 / Phase 2 Allows users to set this VPN tunnel to use any encryption
mode . Note that this parameter must be identical to
Encryption:
that of the remote encryption parameter: DES (64-bit
encryption mode), 3DES (128-bit encryption mode),
AES (the standard of using security code to encrypt
information) . It supports 128-bit, 192-bit, and 256-bit
encryption keys .
Phase 1 / Phase 2 Allows users to set this VPN tunnel to use any
authentication mode . Note that this parameter must
Authentication:
be identical to that of the remote authentication mode:
"MD5" or "SHA1" .
The lifetime for this exchange code is set to 28,800
Phase 1 / Phase 2
seconds (8 hours) by default . This allows the automatic
SA Life Time:
generation of other exchange passwords within the
valid time of the VPN connection to guarantee security .
Perfect Forward Check to enable perfect forward secrecy (PFS) The Phase
2 shared key generated during the IKE coordination will
Secrecy:
conduct further encryption and authentication . When
PFS is enabled, hackers using brute force to capture the
key will not be able to get the Phase 2 key in such a short
period of time .
The function is checked by default .
Preshared Key: For the Auto (IKE) option, enter a password of any digit
or characters in the text of Pre-shared Key, and the
system will automatically translate what users entered
as exchange password and authentication mechanism
during the VPN tunnel connection . This exchange
password can be up to 30 characters .
Check the box to enable Minimum Preshared Key
M i n i m u m
Preshared Key Complexity.
Complexity:
Preshared Key Check the Minimum Pre-shared Key Complexity box
and a strength meter will appear .
Strength Meter:
• Advanced (Only for IKE with Preshared Key mode)
You can click Advanaced+ to configure advanced settings for IKE with
Preshared key mode . To hide the settings, please click Advanced- .
VPN
56