D-Link 800 - DFL 800 - Security Appliance, User Manual, Page: 342 / 469

Several algorithm proposal lists are already defined by default in NetDefendOS for different VPN
scenarios and user defined lists can be added.
Two IKE algorithm lists and two IPsec lists are already defined by default:
• High
This consists of a more restricted set of algorithms to give higher security. The complete list is
3DES, AES, Blowfish, MD5, SHA1.
• Medium
This consists of a longer set of algorithms. The complete list is 3DES, AES, Blowfish, Twofish,
CAST128, MD5, SHA1.
Example 9.1. Using an Algorithm Proposal List
This example shows how to create and use an IPsec Algorithm Proposal List for use in the VPN tunnel. It will
propose 3DES and DES as encryption algorithms. The hash function SHA1 and MD5 will both be used in order to
check if the data packet is altered while being transmitted. Note that this example does not illustrate how to add
the specific IPsec tunnel object. It will also be used in a later example.
CLI
First create a list of IPsec Algorithms:
gw-world:/> add IPsecAlgorithms esp-l2tptunnel DESEnabled=Yes DES3Enabled=Yes
SHA1Enabled=Yes MD5Enabled=Yes
Then, apply the algorithm proposal list to the IPsec tunnel:
gw-world:/> set Interface IPsecTunnel MyIPsecTunnel IPsecAlgorithms=esp-l2tptunnel
Web Interface
First create a list of IPsec Algorithms:
1. Go to Objects > VPN Objects > IPsec Algorithms > Add > IPsec Algorithms
2. Enter a name for the list, for example esp-l2tptunnel
3. Now check the following:
• DES
• 3DES
• SHA1
• MD5
4. Click OK
Then, apply the algorithm proposal list to the IPsec tunnel:
1. Go to Interfaces > IPsec
2. In the grid control, click the target IPsec tunnel
3. Select the recently created esp-l2tptunnel in the IPsec Algorithms control
4. Click OK
9.3.7. Pre-shared Keys
9.3.7. Pre-shared Keys Chapter 9. VPN
342