Motorola WS2000 System Reference Manual page 72

4-22 WS2000 Wireless Switch System Reference Guide
3. Select the authentication and anti-replay method you wish to use for the tunnel from the
Authentication
None Disables AH authentication and the rest of the fields in this area will not be active.
MD5 Enables the Message Digest 5 algorithm, which requires 128-bit (32-character hexadecimal)
authentication keys.
SHA1 Enables Secure Hash Algorithm 1, which requires 160-bit (40-character hexadecimal) keys.
4. If either MD5
and an Outbound Authentication Encryption
character hexadecimal keys. If
5. Provide up to an eight-character hexadecimal values for the
(minimum is 100). These fields are used to identify the inbound security association created by the AH
algorithm. These values must match the corresponding outbound and inbound SPI values (respectively)
configured on the remote security gateway. These values should also be unique across all tunnels on the
system.
6. Select the ESP Type
None
ESP
ESP with
Authentication
7. If ESP or ESP with Authentication
DES
3DES
menu.
or SHA1 is the authentication type, specify an
SHA1 is the authentication type, specify 40-character hexadecimal keys.
from the menu.
Disables ESP and the rest of the fields in this area will not be active.
Enables Encapsulating Security Payload encryption for this tunnel.
Enables Encapsulating Security Payload encryption with authentication for this tunnel.
is enabled, select an
This option selects the DES encryption algorithm, which requires 64-bit (16-character
hexadecimal) keys.
This option selects the 3DES encryption algorithm, which requires 192-bit (48-character
hexadecimal) keys. When creating keys for 3DES, the first 8 bytes cannot equal the sec-
ond 8 bytes, and the second 8 bytes cannot equal the third 8 bytes.
Inbound Authentication Encryption Key
Key. If MD5 is the authentication type, specify 32-
Inbound SPI and
Encryption Algorithm
AH
Outbound SPI fields
from the menu.