Junxion JB-110B, JB110E manual Splash

Encryption. Determines the type and length of encryption key used to encrypt/ decrypt ESP (Encapsulating Security Payload) packets. DES supports 56-bit encryption. 3DES supports 168-bit encryption. AES (Advanced Encryption Standard) is available with 128, 192, and 256-bit keys.

Authentication. Can be configured with MD5 or SHA1. MD5 is an algorithm that produces a 128-bit digest for authentication. SHA1 is a more secure algorithm that produces a 160-bit digest.

SA Time. Determines how long the VPN tunnel is active. The default value is 28,800 seconds, or 8 hours.

Perfect Forward Secrecy. Provides additional security through a DH shared secret value. When this feature is enabled, one key cannot be derived from another. This ensures previous and subsequent encryption keys are secure even if one key is compromised.

Phase 2. These settings are used to create the IPSec SA. The configurations are similar to those in phase 1.

Shared Secret or x.509. The VPN setup can use either a Shared Secret key or an x.509 certificate. This key or certificate is pre-shared by all parties to make the connection. Shared secret keys should be as complex as possible while adhering to any character limit on your VPN server. If you are using an x.509 certificate, you must load the Host Key, Host Certificate, and Server Certificate files directly into the Junxion Box before you click Apply.

Security note. When an individual device connects to a VPN using its own VPN client software, a secure VPN connection exists all the way from the individual device to the VPN server. When you use the Junxion Box to provide VPN access to devices on the LAN, a secure VPN connection exists between the Junxion Box and the VPN server, not the Junxion Box and the LAN devices. You can secure the LAN connections by enabling encryption on the Security page, and by making sure no unauthorized devices are connected to your wireless or wired LAN.

Splash Page

The Junxion Platform includes an optional splash page that can be enabled to greet Junxion Box users. If turned on, this feature will display a custom greeting page in any

32 junxion box user guide