Cisco Systems DPC/EPC2325 DOCSIS important safety instructions IPsec Settings, Fqdn

How Do I Configure My DOCSIS Residential Gateway?

Field Name	Description
Identity	Allows you to enter the identity string after you have selected the
	identity type using one of the following formats:

ƒ

ƒ

ƒ

For IP address mode use the format xxx.xxx.xxx.xxx

For FQDN use the format "yourdomain.com"

For email address u se the format "yourname@yourdomain.com"

	The remote VPN endpoint on the other end of the tunnel should match
	these settings for its remote endpoint settings
Network address	Allows you to enter the address type for the endpoint WAN. Choose
type	one of the following options:

ƒ

ƒ

IP address

FQDN

Remote address	Allows you to enter either the IP address or the FQDN of the remote
	endpoint depending on what Network Address type you selected

IPsec Settings

With VPN tunnels there are two phases of Security Association (SA).

Phase 1 creates an Internet Key Exchange (IKE) SA

When Phase 1 is complete, Phase 2 creates one or more IPsec SAs that are then used to key IPsec sessions

Field	Description
Pre-shared key	Allows you to enter the Pre-shared key of the firewall identifier if one
	side of the VPN tunnel is using a unique firewall
Phase 1 DH group	Allows you to select one of following three Diffie-Hellman (DH)
	encryption/decryption groups:

ƒ

ƒ

ƒ

768bits 1024 bits 1536 bits

Diffie-Hellman is a cryptographic technique that uses public and private keys for encryption and decryption. The higher number of bits selected, the more secure the connection

62 4024320 Rev A