Draytek Vigor2912 Series, User Manual

Page: 317 / 422

Vigor2912 Series User’s Guide 307
IKE phase 1 mode - Select from Main mode and
Aggressive mode. The ultimate outcome is to exchange
security proposals to create a protected secure channel.
Main mode is more secure than Aggressive mode since
more exchanges are done in a secure channel to set up the
IPsec session. However, the
Aggressive mode is faster. The
default value in Vigor router is Main mode.

IKE phase 1 proposal- To propose the local available
authentication schemes and encryption algorithms to
the VPN peers, and get its feedback to find a match.
Two combinations are available for Aggressive mode
and nine for
Main mode. We suggest you select the
combination that covers the most schemes.

IKE phase 2 proposal- To propose the local available
algorithms to the VPN peers, and get its feedback to
find a match. Three combinations are available for
both modes. We suggest you select the combination
that covers the most algorithms.

IKE phase 1 key lifetime- For security reason, the
lifetime of key should be defined. The default value is
28800 seconds. You may specify a value in between
900 and 86400 seconds.

IKE phase 2 key lifetime- For security reason, the
lifetime of key should be defined. The default value is
3600 seconds. You may specify a value in between
600 and 86400 seconds.

Perfect Forward Secret (PFS)- The IKE Phase 1 key
will be reused to avoid the computation complexity in
phase 2. The default value is inactive this function.
Local ID- In Aggressive mode, Local ID is on behalf
of the IP address while identity authenticating with
remote VPN server. The length of the ID is limited to
47 characters.
Index(1-15) - Set the wireless LAN to work at certain time
interval only. You may choose up to 4 schedules out of the
15 schedules pre-defined in
Applications >> Schedule
setup. The default setting of this field is blank and the
function will always work.