Line Tapping Security; Encryption - BinTec X4100 User Manual

9
Configuration of Security Functions
MPPE V2
DES and Blowfish
342 BinTec Access Networks GmbH
9.3

Line Tapping Security

You can use an encryption mechanism to obtain data security for critical PPP
connections over connections with critical security, provided both connection
partners support this mechanism. The following functions are possible:

Encryption

(chapter 9.3.1, page
VPN (with extra license,
IPSec (with extra license,
Leased lines (chapter 9.3.4, page
9.3.1 Encryption
X4100/200/300 supports encryption of PPP connections to WAN partners.
The MPPE (Microsoft Point to Point
DES and Blowfish methods are used. DES and Blowfish are implemented as
BinTec proprietary solutions.
The MPPE Version 2 encryption protocol, the successor to MPPE, has been de-
veloped by Microsoft and also uses a 40-bit or 56-bit key. These are generated
on authentication.
If a larger key length is set in
nection is not set up.
If one connection partner is set to MPPE V1 as encryption protocol, MPPE V2
is also accepted on connection setup if the set key length is the same.
If these proprietary encryption algorithms are used, either
generate a key automatically or you can define an individual key statically in
consultation with the connection partner.
The DES and Blowfish encryption algorithms are only supported if a license for
VPN is entered in X4100/200/300.
342)
chapter 9.3.2, page 345)
chapter 9.3.3, page 345)
346)
Encryption) version 1 and 2,
X4100/200/300 than in the dial-in client, the con-
X4100/200/300 can