Chapter 4: Configuration
74
IPSec VPN Connection
Connection Name:
A user-defined name for the connection (e.g. “connection to office”).
Local Network:
Set the IP address, subnet or address range of the local network.
Single Address:
The IP address of the local host.
Subnet:
The subnet of the local network. For example, IP: 192.168.1.0 with netmask 255.255.255.0
specifies one class C subnet starting from 192.168.1.1 (i.e. 192.168.1.1 through to 192.168.1.254).
IP Range:
The IP address range of the local network. For example, IP: 192.168.1.1, end IP:
192.168.1.10
Remote Secure Gateway Address (or Domain Name):
The IP address or hostname of the remote VPN
device that is connected via an established VPN tunnel.
Remote Network:
Set the IP address, subnet or address range of the remote network.
Proposal:
This is the IPSec security method. There are two ways of authenticating information: AH
(authentication header) and ESP (Encapsulating Security Payload). Use ESP for greater security so that
data will be encrypted and authenticated. AH data will be authenticated but not encrypted.
Authentication:
Authentication establishes the integrity of the datagram and ensures that it is not tampered
with in transmit. There are three options: Message Digest 5 (
MD5
), Secure Hash Algorithm (
SHA1
) or
NONE
. SHA1 is more resistant to brute-force attacks than MD5, however it is slower.
MD5:
A one-way hashing algorithm that produces a 128
−
bit hash.
Summary of Contents for 8860-C1
Page 1: ...Version 5 51 r1 Last Revised 10 10 2007 ADSL 2 Gateway 8860 C1 User s Manual...
Page 5: ......
Page 13: ......
Page 28: ...Chapter 4 Configuration 27...
Page 83: ...Chapter 4 Configuration 82 Example Configuring a IPSec Host to LAN VPN Connection...
Page 125: ......
