ZyXEL Communications 792H manual Manual Setup, Active Protocol, Mode Security Protocol

Prestige 792H G.SHDSL Router

Table 36-3Menu 27.1.1.1 IKE Setup

FIELD	DESCRIPTION	EXAMPLE
Perfect	Perfect Forward Secrecy (PFS) is disabled (None) by default in phase 2	None
Forward	IPSec SA setup. This allows faster IPSec setup, but is not so secure. Press
Secrecy (PFS)	[SPACE BAR] and choose from DH1 or DH2 to enable PFS. DH1 refers to
	Diffie-Hellman Group 1 a 768 bit random number. DH2 refers to Diffie-Hellman
	Group 2 a 1024 bit (1Kb) random number (more secure, yet slower).

When you have completed this menu, press [ENTER] at the prompt “Press ENTER to Confirm…” to save your configuration, or press [ESC] at any time to cancel.

36.5 Manual Setup

You only configure Menu 27.1.1.2 – Manual Setup when you select Manual in the Key Management field in Menu 27.1.1 – IPSec Setup. Manual key management is useful if you have problems with IKE key management.

36.5.1 Active Protocol

This field is a combination of mode and security protocols used for the VPN. See the Web Configurator part on VPN for more information on these parameters.

Table 36-4 Active Protocol: Encapsulation and Security Protocol

MODE

SECURITY PROTOCOL

Tunnel

Transport

ESP

AH

36.5.2 Security Parameter Index (SPI)

To edit this menu, move the cursor to the Edit Manual Setup field in Menu 27.1.1 – IPSec Setup press [SPACE BAR] to select Yes and then press [ENTER] to go to Menu 27.1.1.2 – Manual Setup.

VPN/IPSec Setup 36-13