VPN

 

 

 

 

IKE Authentication

Pre-shared Key

Pre-shared Key

Certificates are not widely

method

 

 

used.

 

 

 

 

Pre-shared Key

Xxxxxxxxxx

Xxxxxxxxxx

Must match

 

 

 

 

IKE Authentication

MD5

MD5

Must match

algorithm

 

 

 

 

 

 

 

IKE Encryption

DES

DES

Must match

 

 

 

 

IKE Exchange

Main Mode

Main Mode

Must match

mode

 

 

 

 

 

 

 

DH Group

Group 1 (768 bit)

Group 1 (768 bit)

Must match

 

 

 

 

IKE SA Life time

28800

28800

Does not have to match.

 

 

 

Shorter period will be

 

 

 

used.

 

 

 

 

IKE PFS

Disable

Disable

Must match

 

 

 

 

IPSec SA Parameters

 

 

 

 

 

 

IPSec SA Life time

28800

28800

Does not have to match.

 

 

 

Shorter period will be

 

 

 

used.

 

 

 

 

IPSec PFS

Disabled

Disabled

Must match

 

 

 

 

AH authentication

Disabled

Disabled

AH is rarely used

 

 

 

 

ESP authentication

Enable/MD5

Enable/MD5

Must match

 

 

 

 

ESP encryption

Enable/DES

Enable/DES

Must match

 

 

 

 

87

Page 90
Image 90
LevelOne FBR-1404TX user manual Des, IPSec SA Parameters