EN 19

3.2.3. IPSec Security Settings

In the “Security” tab you can configure a VPN with a client for secure access to the box. The box uses IPSec for establishing a VPN.

By default the security will be disabled. Then we have the encryption and authentication settings. The USB 2.0 DEVICE SERVER NAS will support 3DES, AES128, AES192 and AES256 encryption techniques and MD5, SHA1 authentication techniques.

The “Key Management” allows setting the type of key management whether Auto IKE (Internet Key Exchange) or “Manual”.

In the below figure the “Auto (IKE)” is selected. Under this you have an option for enable/disable PFS (Perfect Forward Secrecy) which is useful for key exchange. The “Pre-shared Key” field is to specify what key to use and the “Key Life Time” field is the amount to specify the key lifetime in seconds.

The below figure is the “Manual” configuration of Key Management. Here we have to specify the “Encryption Key” as well as the “Authentication Key”. Apart from these we have a SPI (Security Parameter Index) field with which the SA’s (Security Associations) will be identified.

Page 19
Image 19
Lindy 42829 user manual IPSec Security Settings