InHand InGateway501, User Manual, Page: 104 / 204

InGateway Documentation, Release 0.0.1
– Authentication: specifies the algorithm used for authentication. Options are MD5, SHA1, SHA2-
256, SHA2-384, and SHA2-512.
* MD5: generates a 128-bit message digest for a message of any length.
* SHA1: generates a 160-bit message digest for a message of a length less than 128 bits.
* SHA2-256: generates a 256-bit message digest.
* SHA2-384: generates a 384-bit message digest.
* SHA2-512: generates a 512-bit message digest.
– IPsec Mode: specifies the IPsec encapsulation mode.
* Tunnel Mode: adds an IPsec header (AH or ESP) outside the original IP header and adds
a new IP header at the outermost layer. Then, the original IP packet is protected by IPsec
as a part of payload. The tunnel mode is generally used between two security gateways.
The packets encrypted by one security gateway can only be decrypted by the peer security
gateway.
* Transport Mode: inserts an IPsec header (AH or ESP) between the IP header and upper-
layer protocol header. This mode retains the original IP header but changes the IP protocol
field to AH or ESP, and calculates a new checksum for the IP header. The transport mode
is applicable to communication between two hosts or between a host and a security gateway.
• IPsec Tunnels
– Basic Parameters
* Destination Address: specifies the IP address or domain name of the IKE peer. (Set this
parameter to 0.0.0.0 when the IG902 acts as a server.)
* Map Interface: specifies the interface to which the IPsec policy is applied.
* IKE Version: specifies the version of the IKE protocol. Options are IKEv1 and IKEv2.
* IKEv1 Policy: specifies a policy ID defined in the IKEv1 policy list.
* IKEv2 Policy: specifies a policy ID defined in the IKEv2 policy list.
* IPsec Policy: specifies a policy ID defined in the IPsec policy list.
* Authentication Type: specifies the authentication method used for the IPsec tunnel. Shared
key authentication and digital certificate authentication are supported.
· Shared Key: specifies the shared key used for authentication.
· Digital Certificate: specifies the digital certificate used for authentication. You need to
import a valid certificate on the certificate management page.
* Negotiation Mode: specifies the mode of IKEv1 negotiation.
100 Chapter 1. InGateway Documentation Site Navigation