38
username
XATUTH password
User
defines
XATUTH
password
N/A
MODECFG
Click to enable MODECFG
Disable
Phase II Parameters
IPSec Strategy
Multiple strategies available
3DES-MD5-96
IPSec Life Cycle
Set IPSec life cycle
3600 s
Perfect Forward Secrecy
(PFS) (Advanced Option)
Select disable/Group 1/Group
2/Group 5
Disable (this needs to match
the server)
Link Detection Parameters (Advanced Option)
DPD Interval
Set time interval.
60 s
DPD Timeout
Set the timeout for dropped
packets.
180 s
ICMP Detection Server
Set ICMP detection server
N/A
ICMP Detection Local IP
Set ICMP detection local IP
N/A
ICMP Detection Interval
Set ICMP Detection Interval
60 s
ICMP Detection Timeout
Set ICMP detection timeout
5 s
ICMP Detection Retries
Set ICMP detection max.
retries
10
The security level of three encryption algorithms ranks successively: AES, 3DES, DES. The
implementation mechanism of encryption algorithm with stricter security is complex and slow
arithmetic speed. DES algorithm can satisfy the ordinary safety requirements.
3.6.3 GRE Tunnels
Generic Route Encapsulation (GRE) defines the encapsulation of any other network layer protocol
on a network layer protocol. GRE could be used as the L3TP of VPN to provide a transparent
transmission channel for VPN data. In simple terms, GRE is a tunneling technology which provides
a channel through which encapsulated data message could be transmitted and encapsulation and
decapsulation could be realized at both ends. GRE tunnel application networking shown as the
following figure:
