3Com OfficeConnect User Manual page 62

Depending on which Tunnel Type you have selected, choose from
the following to edit or add the remaining fields:
"IPSec Connections using Remote User Access"
"IPSec Connections using Gateway to Gateway"
"L2TP over IPSec Connections"
"PPTP Connections" on page 66
I
PSec Connections using Remote User Access
If you have selected IPSec as a Tunnel Type and Remote User
Access as a Connection Type, enter the following values:
Connection Name — Enter a descriptive name for the
connection.
Remote User ID — Enter the Remote User ID. This must be
entered identically on the IPSec software installed on the
client's machine.
Tunnel Shared Key — this is the password for the connection
and is a combination of letters, numbers and punctuation and
can be up to 64 characters in length.
on page 62
on page 63
on page 65
Figure 61 IPSec Connection - Remote User Access
Encryption type — choose the encryption type from DES,
3DES or AES. 3DES is more secure than DES but may take
longer to encrypt and decrypt. AES provides the highest
security but will take longer than 3DES to encrypt and
decrypt.
3DES and AES are not shipped with the Router as standard due
to international restrictions on encryption. If your country permits
their use they can be downloaded from the 3Com web site at
http://www.3com.com/
Exchange keys using — choose the encryption method used
to exchange shared keys. Diffie-Hellman Group 5 and
Diffie-Hellman Group 2 are more secure but less common
than Diffie-Hellman Group 1.
Use Perfect Forward Secrecy — Choose whether to use
perfect forward secrecy. Using perfect forward secrecy will
change the encryption keys during the course of a connection
62