EnGenius ETA1305, User Manual

Page: 100 / 132

1
SA (Security Association)
IKE Internet Key E g change is con gured in t f o negotiations.
Phase 1 authenticates the VP = 2 lients to each other Q y
con rming the matching Pre Shared Key f ith the t f o gate f ays.
IPSec is the Phase 2 of the VP = process.
Manually con guring a VPN tunnel pro le.
IKE (Phase 1) Proposal
E g change: 2 lick the drop do f n menu to select the type of
e g change < ain < ode, Aggressive < ode .
DH Group: 2 lick the drop do f n menu to select the 3 H group
group 1, group 2, group 5, group 1 # .
Encryption: 2 lick the drop do f n menu to select the type of
encryption 3 ES, 3 3 ES, AES12 ' , AES192, AES256 .
Authentication: 2 lick the drop do f n menu to select the
authentication protocol <3 5, SHA1 .
Li U e Ti \ e:
Enter the life time value for Phase 1. The life time
value should Q e greater than Phase 2 IPSec . ' 6 # sec. 1day
is a common default and is a normal value for Phase 1.
IPSec (Phase 2) Proposal
Protocol:
2 lick the drop do f n menu to select the protocol type
ESP, AH
Encryption:
2 lick the drop do f n menu to select the type of
encryption 3 ES, 3 3 ES, AES12 ' , AES192, AES256 .
Authentication: 2 lick the drop do f n menu to select the
authentication protocol <3 5, SHA1 .
Per U ect Forward Secrecy (PFS): Select ena Q le to ena Q le PFS. A
fresh 3 H key is generated during IKE phase II and rene f ed for
each key e g change to eliminate dependencies Q et f een the
keys.
DH Group: 2 lick the drop do f n menu to select the 3 H group
group 1, group 2, group 5, group 1 # .
Li U e Ti \ e:
Enter the life time value for Phase 2. The life time
value should Q e smaller than Phase 1 IKE . 36 sec. 1 hour
is a common value for Phase 2.
Apply:
2 lick
Apply
to save the changes.
Cancel:
2 lick
Cancel
to delete the changes.