Eicon Networks SHIVA 1100, Administrator'S Manual, Page: 128 / 136

128 System Administrator’s Guide
Main Mode This Phase 1 keying mode automatically
exchanges encryption and authentication keys
and protects the identities of the parties
attempting to establish the tunnel.
Manual Keying This type of keying requires the encryption and
authentication keys to be specified.
Manual Keys Predetermined encryption and authentication
keys used to establish the tunnel.
Masquerade The process when a gateway on a local network
modifies outgoing packets by replacing the
source address of the packets with its own IP
address. All IP traffic originating from the local
network appears to come from the gateway itself
and not the machines on the local network.
MD5 Message Digest Algorithm Five is a 128 bit hash.
It is one of two message digest algorithms
available in IPSec.
NAT Network Address Translation. The translation of
an IP address used on one network to an IP
address on another network. Masquerading is
one particular form of NAT.
Net mask The way that computers know which part of a
TCP/IP address refers to the network, and which
part refers to the host range.
NTP Network Time Protocol (NTP) used to
synchronize clock times in a network of
computers.
Oakley Group See Diffie-Hellman Group or Oakley Group.
PAT Port Address Translation. The translation of a
port number used on one network to a port
number on another network.
PEM, DER, PCKS#12
PCKS#07 These are all certificate formats.
Term Description