SonicWALL SOHO TZW Getting Started Manual page 39

Manual Key Security Association
6. Define an Incoming SPI and an Outgoing SPI. The SPIs are hexadecimal
(0123456789abcedf) and can range from 3 to 8 characters in length. Or use the default
values.
Each Security Association must have unique SPIs; no two Security Associations can share
the same SPIs. However, each Security Association Incoming SPI can be the same as the
Outgoing SPI.
7. ESP is selected by default from the Protocol menu. ESP is more secure than AH, but AH
requires less processing overhead.
8. 3DES is selected by default from the Encryption Method menu. Type a 48-character
hexadecimal key if you are using 3DES encryption.Type a 16-character hexadecimal key
in the Encryption Key field if you are using DES or ARCFour encryption. This encryption
key must match the remote SonicWALL's encryption key.
The default 48-character key is a unique key generated every time a VPN Policy is created.
9. AH is selected by default from the Authentication Key field. When a new SA is created, a
32-character key is automatically generated in the Authentication Key field. This key can
be used as a valid key. If this key is used, it must also be typed in the Authentication Key
field in the remote SonicWALL. If authentication is not used, this field is ignored.
10. Click Next.
Page 38 SOHO TZW Getting Started Guide