Motorola AP-7131N-FGR Product Reference Manual page 259

3. Configure the Manual Key Settings
NOTE When entering Inbound or Outbound encryption or authentication keys, an
error message could display stating the keys provided are "weak". Some
attack tools invoke a dictionary to hack keys based on commonly used
words. To avoid entering a weak key, try to not to produce a key using
commonly used terms and attempt to mix alphabetic and numerical key
attributes when possible.
AH Authentication
Inbound AH
Authentication Key
Outbound AH
Authentication Key
Inbound SPI (Hex)
Outbound SPI (Hex)
screen to modify the following:
AH provides data authentication and anti-replay services for the
VPN tunnel. Select the required authentication method from the
drop-down menu:
• None - Disables AH authentication. The rest of the fields are
not active.
• SHA1 - Enables Secure Hash Algorithm 1, requiring 160-bit
(40-character hexadecimal) keys.
Configure a key for computing the integrity check on inbound traffic
with the selected authentication algorithm. The key must be 32/40
hexadecimal (0-9, A-F) characters in length. The key value must
match the corresponding outbound key on the remote security
gateway.
Configure a key for computing the integrity check on outbound
traffic with the selected authentication algorithm. The key must be
32/40 hexadecimal (0-9, A-F) characters in length. The key value
must match the corresponding inbound key on the remote security
gateway.
Enter an up to six-character hexadecimal value to identify the
inbound security association created by the AH algorithm. The
value must match the corresponding outbound SPI value configured
on the remote security gateway.
Provide an up to six-character hexadecimal value to identify the
outbound security association created by the AH algorithm. The
value must match the corresponding inbound SPI value configured
on the remote security gateway.
Configuring Access Point Security 6-31