Chapter 3
Configuration via Local Pages
Page layout with Clicking Specify Additional Networks allows you to designate up to four addresses/ additional Networks subnets in case the Local Trusted Network can not be described by a single address/
subnet.
IKE Security Descriptor The IKE Security Descriptor bundles the security parameters used for the IKE Security Association (Phase1).
A number of IKE Security Descriptors are
For example, the
Parameter | Value for AES_MD5 |
|
|
Cryptographic function | AES |
|
|
Hash function | |
|
|
MODP768 (= group 1) | |
|
|
IKE SA lifetime in seconds. | 3600 seconds (= 1 hour) |
|
|
The contents of the IKE Security Descriptors can be verified via
Advanced > Peers > Security Descriptors.
It is recommended to use AES as preferred encryption method. AES is more advanced, compared to DES or 3DES. It is faster for comparable key lengths, and provides better security.
The IKE Security Descriptor bundles the security parameters used for the IKE
Security Association (Phase1).
66 | |
|
