Avaya 3.7, Configuration Manual

Page: 142 / 326

Configuring VPN objects
142 Avaya VPNmanager Configuration Guide Release 3.7
In the ISAKMP (IKE) area you set up the key-exchange parameters that you want used for the
VPN.
Field Description
Encryption
Algorithm
Select one of the following types:
●
DES. A common encryption algorithm that is not subject to
export regulations.
●
3DES. A robust encryption algorithm. 3DES is subject to
government regulation. Contact Avaya for a current list of
controlled and uncontrolled application and territories.
●
Any. Accepts any encryption proposal that is made by the
device on the other side.
IKE VPNs use ESP to encrypt IP packets as defined in RFC2406.
You can choose either DES-CBC or 3DES-CBC (Domestic U.S./
Canada only) encryption.
Note:
Note:
The use of 3DES is subject to government
regulation. Contact Avaya, VPN Support, for a
current list of controlled and uncontrolled
applications and territories.
Authentication
Algorithm
Select one of the following types:
●
MD5 (RFC1321)
●
SHA1
●
Any. Accepts any authentication proposal that is made by
the device on the other side.
IKE VPNs use either an ESP trailer as defined in RFC2406, or AH
as defined in RFC2402 to authenticate IP packets.