Configuring DRO-250i
DRO-250i User Manual
78
can choose between DES and 3DES encryption methods. The key length
for the 3DES algorithm is three times as long as the DES key, and is
therefore more likely to be secure. User must choose exactly the same IKE
encryption algorithm on both ends of a VPN tunnel.
Phase 2 Proposal
PFS Mode
- This drop-down menu allows user to specify the mode that
will be used for IPSec Perfect Forward Security (PFS). The choices are
Disable, Group 1, and Group 2. Group 1 uses 768-bit encryption, , Group
2 uses 1024-bit encryption and Disable disables the PFS mode. User must
use exactly the same PFS encryption mode on both ends of the VPN
tunnel.
IPSec Operation
- This drop-down menu allows the user to select the
level of encryption that will be applied to packets that are sent between the
two endpoints of a VPN tunnel. ESP - specifies that the entire packet will
be encrypted (by the DES or 3DES algorithm, as selected in ESP tranform
field) and authenticated (by the MD5 or SHA algorithm, as selected in
ESP Authentication field). AH - specifies that only the authentication
algorithm (MD5 or SHA, as selected below) will be used. When AH is
selected, the data portion of packets sent between the two endpoints of a
VPN tunnel will not be encrypted.
IPsec Life Duration
- Similar as IKE Life Duration, it's used for life
duration of phase 2 key (in seconds). When it expires the two peer site
should trigger phase 2 negotiation again, to set up a new phase 2 key.
ESP Transform
- This drop-down menu allows user to select the
encryption algorithm that will be used when ESP is selected in the IPSec
Operation drop-down menu above. User can choose between Null - no
encryption, DES - using DES encryption, 3DES - using triple DES
encryption and AES - using AES encryption. User must select the exact
same ESP transform (encryption algorithm) on both ends of a VPN tunnel.
ESP Auth
- This drop-down menu allows user to select the encryption
algorithm that will be used when ESP is selected in the IPSec Operation
drop-down menu above. User can choose between Null - no authorization,
