Encapsulating Security Payload (Esp) Settings - Teltonika RUT100 HSDPA User Manual

4.7.3.1.2

Encapsulating Security Payload (ESP) settings

The ESP protocol provides origin authenticity, integrity, and confidentiality protection of a
packet.
Figure 33. Encapsulating Security Payload (ESP) settings
Encapsulation Protocol – select encapsulation protocol: Authentication header (AH) or
Encapsulating Security Payload (ESP).
Inbound SPI – specify the inbound compression [256-65535].
Outbound SPI – specify the outbound compression [256-65535].
Authentication algorithm – specify the authentication algorithm [Open system/hmac-
md5/hmac-sha1/keyed-md5/keyed-sha1/hmac-sha2-256/hmac-sha2-384/hmac-sha2-512/hmac-
ripemd160/aes-xcbc-mac].
Preshare key – specify the ESP authentication secret [string]. Secret's length depends on
selected algorithm, eg. 128 bit long secret is 16 characters in length, 128 bits / 8 bits (one character) =
16. The algorithm key lengths in bits are:
hmac-md5 - 128
hmac-sha1 - 160
keyed-md5 - 128
keyed-sha1 - 160
hmac-sha2-256 - 256
Encryption – specify the authentication algorithm [Open system/des-cbc/ blowfish-cbc/
cast128-cbc/des-deriv/3des-deriv/rijndael-cbc/twofish-cbc/aes-ctr].
Preshare key – specify the ESP encryption secret [string]. Secret's length depends on selected
algorithm, eg. 128 bit long secret is 16 characters in length, 128 bits / 8 bits (one character) = 16. The
algorithm key lengths in bits are:
des-cbc - 64
blowfish-cbc - 40 to 448
cast128-cbc - 40 to 128
des-deriv - 64
hmac-sha2-384 - 384
hmac-sha2-512 - 512
hmac-ripemd160 - 160
aes-xcbc-mac – 128
3des-deriv - 192
rijndael-cbc -128/192/256
twofish-cbc - 0 to 256
aes-ctr - 160/224/288
32 | P a g e