Dell PowerConnect W-AirWave 7.6 Configuration Manual page 80

Table 31:
Advanced Services > VPN Services > IKE > IKE Policy Fields and Descriptions
Field
General Settings
Folder
Priority
Other Settings
Encryption
Hash Algorithm
Authentication
Diffie-Hellman Group
Lifetime
Version
74 | Configuration Reference
Default Description
Set the folder with which the IKE policy profile is associated. The drop-down menu
Top
displays all folders available for association with the IKE Policy profile.
Blank Enter the priority number of this IKE policy.
From the drop-down menu, select the encryption type to be supported in the IKE
policy.
DES
l
3DES
l
AES128
l
AES192
l
AES256
l
Select the hash algorithm for this IKE policy.
MD5
l
SHA
l
SHA1-96
l
SHA2-256-128
l
SHA2-384-192
l
NOTE: 'SHA2-256-128' and 'SHA2-384-192' require an Advanced Cryptography
license and a minimum version of 6.1.0.0.
Dell PowerConnect W-Series ArubaOS VPNs support client authentication using
pre-shared keys, RSA digital certificates, or Elliptic Curve Digital Signature
Algorithm (ECDSA) certificates. To set the authentication type for the IKE rule, click
the Authentication drop-down list and select one of the following types:
Pre-Share (for IKEv1 clients using pre-shared keys)
l
RSA (for clients using certificates)
l
ECDSA-256 (for clients using certificates)
l
ECDSA-384 (for clients using certificates)
l
NOTE: 'ECDSA-256' and 'ECDSA-384' require an Advanced Cryptography license
and a minimum version of 6.1.0.0.
Diffie-Hellman is a key agreement algorithm that allows two parties to agree upon
a shared secret, and is used within IKE to securely establish session keys. To set
the Diffie Hellman Group for the ISAKMP policy, click the Diffie Hellman Group
drop-down list and select one of the following groups:
Group 1: 768-bit Diffie Hellman prime modulus group.
l
Group 2: 1024-bit Diffie Hellman prime modulus group.
l
Group 19: 256-bit random Diffie Hellman ECP modulus group.
l
Group 20: 384-bit random Diffie Hellman ECP modulus group.
l
NOTE: 'EC 256-bit (19)' and 'EC 384-bit (20)' require an Advanced Cryptography
license and a minimum version of 6.1.0.0.
Set the Security Association Lifetime to define the lifetime of the security
empty
association, in seconds.
1 Select 1 to configure the VPN for IKEv1, or 2 for IKEv2.
Dell PowerConnect W-AirWave 7.6 | Configuration Guide