Field
Description
a renewed phase 2 SA, even if the keys of the phase 1 SA have
become known.
The field has the following options:
•
. >"
: During the Diffie-Hellman key calculation, mod-
ular exponentiation at 768bits is used to create the encryption
material.
•
>"
(default value): During the Diffie-Hellman key
calculation, modular exponentiation at 1024 bits is used to
create the encryption material.
•
' >"
: During the Diffie-Hellman key calculation,
modular exponentiation at 1536 bits is used to create the en-
cryption material.
Lifetime
Define how the lifetime is defined that will expire before phase 2
SAs need to be renewed.
The new SAs are negotiated shortly before expiry of the current
SAs. As for RFC 2407, the default value is eight hours, which
means the key must be renewed once eight hours have
elapsed.
The following options are available for defining the lifetime:
Input in
-%&
: Enter the lifetime for phase 2 key in seconds.
The value can be a whole number from
to
.'.
. The
default value is
.
.
Input in
>)&
: Enter the lifetime for phase 2 keys as amount
of data processed in Kbytes. The value can be a whole number
from
to
.'.
. The default value is
.
The menu Advanced Settings consists of the following fields:
Fields in the Advanced Settings menu
Field
Description
IP Compression
Select whether compression is to be activated before data en-
cryption. If data is compressed effectively, this can result in
higher performance and a lower volume of data to be trans-
ferred. In the case of fast lines or data that cannot be com-
pressed, you are advised against using this option as the per-
formance can be significantly affected by the increased effort
Funkwerk Enterprise Communications GmbH
18 VPN
bintec Rxxx2/RTxxx2
335
