HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 868

Using the Web Browser Interface for Advanced Configuration Tasks
Setting Up Virtual Private Networks
C a u t i o n
14-68
You can also alter the security parameters IKE proposes for the IKE SA,
including:
hash algorithm
encryption algorithm
Diffie-Hellman key group
IKE SA lifetime
Select the desired setting from the pull-down menu for each parameter.
Table 14-3 displays settings available for these parameters. Specify how
long the router should keep the SA open by entering a value in seconds in
the IKE SA Lifetime field. See Chapter 8: Virtual Private Networks for
more information on these security parameters.
Table 14-3. Settings for IKE Security Parameters
Parameter
encryption algorithm
hash algorithm
authentication type
DH group
lifetime
Take care when altering default security settings. Security parameters for both
the IKE and the IPSec SA must match those proposed by the peer.
Settings
• DES
• 3DES
• AES (128-bit)
• AES (192-bit)
• AES (256-bit)
• MD5
• SHA-1
• preshared key
• DSS certificate
• RSA certificate
• 1
• 2
60 to 86,400 seconds (1 minute to 1 day)