Table of Contents
Advertisement
16 VPN
344
Field
DH Group
Lifetime
Authentication Method Only for Phase-1 (IKE) Parameters
Description
ation or the hash algorithms is based on the author's knowledge
and opinion at the time of creating this User Guide. In particular,
the quality of the algorithms is subject to relative aspects and
may change due to mathematical or cryptographic develop-
ments.
Only for Phase-1 (IKE) Parameters
The Diffie-Hellman group defines the parameter set used as the
basis for the key calculation during phase 1. "MODP" as sup-
ported by bintec elmeg devices stands for "modular exponenti-
ation".
Possible values:
•
: During the Diffie-Hellman key calculation, mod-
ular exponentiation at 768 bits is used to create the encryption
material.
•
: During the Diffie-Hellman key calculation,
modular exponentiation at 1024 bits is used to create the en-
cryption material.
•
: During the Diffie-Hellman key calculation,
modular exponentiation at 1536 bits is used to create the en-
cryption material.
Create a lifetime for phase 1 keys.
The following options are available for defining the Lifetime:
• Input in Seconds: Enter the lifetime for phase 1 key in
seconds. The value can be a whole number from 0 to
2147483647. The default value is
key must be renewed once four hours have elapsed.
• Input in kBytes: Enter the lifetime for phase 1 keys as amount
of data processed in kBytes. The value can be a whole num-
ber from 0 to 2147483647. The default value is
means that the number of transmitted kBytes is irrelevant.
Select the authentication method.
Possible values:
bintec elmeg GmbH
, which means the
, which
bintec RS Series
Hide quick links:
Advertisement
Table of Contents
