Cisco DDR2200 Series, Installation And Operation Manual

Page: 266 / 276

Chapter 7 Advanced Configuration
244 4036168 Rev A
16 In the Perfect Forward Secrecy field, select one of the following options:

If you select Enable, Perfect Forward Secrecy is enabled.
OR

If you select Disable, Perfect Forward Secrecy is disabled.
17 Do you want to configure the advanced settings?

If yes , in the Advanced IKE Settings field, click Show Advanced Settings to
populate the screen with advanced settings.

If no , go to step 20.
18 Complete the advanced settings as follows:
a In the Phase 1 Mode field, select Main or Aggressive.
b In the Encryption Algorithm field, select one of the following encryption
algorithms:
– 3DES
– AES -128
– AES - 192
– AES - 256
c In the Integrity Algorithm field, select MD5 or SHA1.
d In the Select Diffie-Hellman Group for Key Exchange field, select one of the
following options:
– 768 bit
– 1024 bit
– 1536 bit
–
2048 bit
– 3072 bit
– 4096 bit
– 6144 bit
–
8192 bit
e In the Key Life Time, enter the life of the key in seconds.
19 Repeat step 17 for each phase.
20 Click Save/Apply to save your settings.