TRENDnet TW100-BRV324 manual ESP Encryption, Authentication Algorithm, ESP Authentication, Keys

Microsoft VPN

ESP Encryption	ESP (Encapsulating Security Payload) provides security for the
	payload (data) sent through the VPN tunnel. Generally, you will
	want to enable both Encryption and Authentication.
	Authentication Algorithm
	• The 3DES algorithm provides greater security than DES, but is
	slower.
	• If using AES, you must select the Key Size. If using DES or
	3DES, this field is ignored.
ESP Authentication	Generally, you should enable ESP Authentication. There is little
	difference between the available algorithms. Just ensure each
	endpoint use the same setting.
Manual Key Encryption
AH Authentication	AH (Authentication Header) specifies the authentication protocol
	for the VPN header, if used. (AH is often NOT used)
	If AH is not enabled, the following settings can be ignored.
	Keys
	• The "in" key here must match the "out" key on the remote
	VPN, and the "out" key here must match the "in" key on the
	remote VPN.
	• Keys can be in ASCII or Hex (0..9 A..F)
	• For MD5, the keys should be 32 hex/16 ASCII characters.
	• For SHA-1, the keys should be 40 hex/20 ASCII characters.
	SPI
	• Each SPI (Security Parameter Index) must be unique.
	• The "in" SPI here must match the "out" SPI on the remote
	VPN, and the "out" SPI here must match the "in" SPI on the
	remote VPN.
	• Each SPI should be at least 3 characters.
ESP Encryption	ESP (Encapsulating Security Payload) provides security for the
	payload (data) sent through the VPN tunnel. Generally, you will
	want to enable both Encryption and Authentication.

Key - In / Key - Out

•The "In" key here must match the "Out" key on the remote VPN, and the "Out" key here must match the "In" key on the remote VPN.

•For DES, keys should be 8 ASCII characters (16 HEX chars).

•For 3DES, keys should be 24 ASCII characters (48 HEX chars).

•If using AES encryption, the key input size must match the Key Size selected above.

79