EN 19
3.2.3. IPSec Security Settings
In the “Security” tab you can configure a VPN with a client for secure access to the box. The box uses IPSec for establishing a VPN.
By default the security will be disabled. Then we have the encryption and authentication settings. The USB 2.0 DEVICE SERVER NAS will support 3DES, AES128, AES192 and AES256 encryption techniques and MD5, SHA1 authentication techniques.
The “Key Management” allows setting the type of key management whether Auto IKE (Internet Key Exchange) or “Manual”.
In the below figure the “Auto (IKE)” is selected. Under this you have an option for enable/disable PFS (Perfect Forward Secrecy) which is useful for key exchange. The
The below figure is the “Manual” configuration of Key Management. Here we have to specify the “Encryption Key” as well as the “Authentication Key”. Apart from these we have a SPI (Security Parameter Index) field with which the SA’s (Security Associations) will be identified.