|
|
| VPN |
|
|
|
|
IKE Authentication | Certificates are not widely | ||
method |
|
| used. |
|
|
|
|
Xxxxxxxxxx | Xxxxxxxxxx | Must match | |
|
|
|
|
IKE Authentication | MD5 | MD5 | Must match |
algorithm |
|
|
|
|
|
|
|
IKE Encryption | DES | DES | Must match |
|
|
|
|
IKE Exchange | Main Mode | Main Mode | Must match |
mode |
|
|
|
|
|
|
|
DH Group | Group 1 (768 bit) | Group 1 (768 bit) | Must match |
|
|
|
|
IKE SA Life time | 28800 | 28800 | Does not have to match. |
|
|
| Shorter period will be |
|
|
| used. |
|
|
|
|
IKE PFS | Disable | Disable | Must match |
|
|
|
|
IPSec SA Parameters |
|
| |
|
|
|
|
IPSec SA Life time | 28800 | 28800 | Does not have to match. |
|
|
| Shorter period will be |
|
|
| used. |
|
|
|
|
IPSec PFS | Disabled | Disabled | Must match |
|
|
|
|
AH authentication | Disabled | Disabled | AH is rarely used |
|
|
|
|
ESP authentication | Enable/MD5 | Enable/MD5 | Must match |
|
|
|
|
ESP encryption | Enable/DES | Enable/DES | Must match |
|
|
|
|
87