Tunnel Protocols

Chapter 3

 

Configuring an ANG-3000/7000

 

Table 3

Encryption Parameters

 

 

 

 

Tunnel

Parameter

 

Explanation

Protocol

 

 

 

 

 

 

 

 

IPSec

None

 

Disables encryption on the tunnel; because this results

 

 

 

in a less secure connection, this setting is not

 

 

 

recommended.

 

 

 

 

 

ARCFOUR 40 bit

 

Enables a 40-bit key public domain algorithm that is

 

 

 

designed to work with Rivest Cipher 4 (RC4), a

 

 

 

stream-based cipher method that supports both 40-bit

 

 

 

and 128-bit keys. Using RC4, data packets can be

 

 

 

encrypted as they are received instead of in blocks.

 

 

 

 

 

ARCFOUR 128 bit

 

Enables a 128-bit key version of ARCFOUR (described

 

 

 

above).

 

 

 

 

 

DES

 

Enables Data Encryption Standard (DES), a block

 

 

 

cipher method that uses 56-bit keys. Using DES, data is

 

 

 

encrypted in fixed-size blocks and packets are padded

 

 

 

to become a multiple of the block size.

 

 

 

 

 

Triple-DES

 

Enables a version of DES (described above) that

 

 

 

employs a DES encryption with one key, a decryption

 

 

 

with a second key, and then another encryption with a

 

 

 

third key. The result is equivalent to DES with a 112-bit

 

 

 

key.

 

 

 

 

PPTP

MPPE (40 bit)

 

Enables 40-bit key Microsoft Point-to-Point Encryption

 

 

 

(MPPE) which generates a key based on a hash of the

 

 

 

user’s password and invokes RC4 encryption. This type

 

 

 

of encryption is supported by

 

 

 

Windows 95/98/NT/2000/ME computers without any

 

 

 

additional software.

 

 

 

 

 

MPPE (128 bit)

 

Enables 128-bit key MPPE on the tunnel. To support

 

 

 

128-bit keys, the Aurorean computer must receive a

 

 

 

128-bit encryption upgrade available from Microsoft.

 

 

 

This upgrade may not be available to users outside the

 

 

 

U.S.

 

 

 

 

10Click the Compression tab.

48

RiverMaster Administrator’s Guide

Page 60
Image 60
Enterasys Networks Network Card manual Click the Compression tab, Tunnel Parameter Explanation Protocol