Fields in the Phase-2 ProfilesPhase-2 (IPSEC) Parameters menu
Field
Description
Description
Enter a description that uniquely identifies the profile.
The maximum length of the entry is 255 characters.
Proposals
In this field, you can select any combination of encryption and
message hash algorithms for IKE phase 2 on your default. The
combination of six encryption algorithms and two message hash
algorithms gives 12 possible values in this field.
Encryption algorithms (
Encryption
):
•
'3-
(default value): 3DES is an extension of the DES al-
gorithm with an effective key length of 112 bits, which is rated
as secure. It is the slowest algorithm currently supported.
•
!! 144 !!
: All options can be used.
•
1-!
: Rijndael has been nominated as AES due to its
fast key setup, low memory requirements, high level of secur-
ity against attacks and general speed. Here, it is used with a
key length of 128 bits.
•
1-!
: Rijndael has been nominated as AES due to its
fast key setup, low memory requirements, high level of secur-
ity against attacks and general speed. Here, it is used with a
key length of 192 bits.
•
1-!
: Rijndael has been nominated as AES due to its
fast key setup, low memory requirements, high level of secur-
ity against attacks and general speed. Here, it is used with a
key length of 256 bits.
•
+ &
: Twofish was a final candidate for the AES
(Advanced Encryption Standard). It is rated as just as secure
as Rijndael (AES), but is slower.
•
</ &
: Blowfish is a very secure and fast algorithm.
Twofish can be regarded as the successor to Blowfish.
•
61-+
: CAST is also a very secure algorithm, marginally
slower than Blowfish, but faster than 3DES.
•
3-
: DES is an older encryption algorithm, which is rated as
weak due to its small effective length of 56 bits.
Hash algorithms (
Authentication
):
•
(3
(default value): MD 5 (Message Digest #5) is an older
Funkwerk Enterprise Communications GmbH
18 VPN
R1xxx/R3xxx/R4xxx
297
