DG200 Series
User’s Guide
45
Click Show Advanced Settings for more settings.
Figure 66: IPSec VPN Advanced Settings
There are two phases in advanced settings. There are five parameters in phase 1 and
four parameters in phase 2.
Select
Mode
from the list in phase 1: Main or Aggressive
Select
Encryption Algorithm
from the list in phase 1 and 2: DES, 3DES, AES-128,
AES-192, AES-255
Select
Integrity Algorithm
in phase 1 and 2: MD5 or SHA1
Set
Diffie-Hellman Group
in phase 1 and 2 for Key Exchange:
Enter the
Key life time
in phase 1 and 2 to change the key again.
Click
Save/Apply
to save the configuration
Certificate
The page provides the Certificate configuration. There are two sub-menu (Local and Trusted
CA) are provided. “Local” means local certificates and “Trusted CA” means trusted certificate
Authority certificates. Local Certificates preserve the identity of the modem. CA certificates are
used by the device to very certificates from the other hosts.
Local Certificates
Local certificates are used by peers to verify your identity.
Figure 67: Local Certificate Configuration
Click
Create Certificate Request
to generate a certificate.
Check
Import Certificate
to get a certificate from file.
