CTC Union ICR-W401, User Manual

Page: 87 / 147

87
CHAPTER 3.
WEB CONFIGURATIONS
Select from the created authentication IDs or empty.
Remote Host
The IP address of the peer gateway's public network interface.
If this value is blank, the connection will act the server role to wait the
incoming request.
Remote ID
The identification for authentication on remote peer.
Select from the created authentication IDs or empty.
(2) IPsec Phase 2 Setting
VPN > IPsec > Connections > Phrase 2 setting
Item Description
Protocol Only support ESP.
Encryption
The encryption algorithm.
Select from AES128 (default), AES192, AES256 or 3DES.
Hash
The integrity algorithm.
Select from MD5, SHA1 (default) or SHA256.
DH Group
The Diffie Hellman Group.
Select from 1(768 bit), 2(1024 bit), 5(1536 bit) (default), 14(2048 bit),
15(3072 bit), 16(4096 bit), 17(6144 bit) or 18(8192 bit).
Lifetime
The length of a particular instance of a connection.
Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24
hours.
Local Subnet
The private subnet behind the router.
The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M
If this value is blank, the connection will set it as the “Local Host” of Phase
1 setting.
Note: This option only works on Policy-based IPsec VPN type.