LV switch IPPBX3000, User Manual

Page: 61 / 195

LvSwitch IPPBX 3000 Manual
59
mode.
Exchange direction Select “Initiate” This end is the initiating end of
IKE negotiation; Select “receive” this end is the
receiving end of IKE negotiation.
Authentication Select the authentication mode of the both
communications parties. Optional “preshared
key”or
RSA Signature
Key group DH2(1024) OR DH5(1536)
Dead Peer Detection(DPD) Click and to enable this function,Interval: sets how
long it is before an IPsec message is received from
the opposite side, triggering DPD queries.The
default value is 30s,the range 1-180 s.
Timeout: after sending the DPD query, set how
long it is before the DPD response is received, and
delete IKE SA and the corresponding IPsec SA.
The default value is "120 seconds", ranging from 1
to 600 seconds.
Phase 1 setting description as following:
Table 5-14 Phase 1 configuration as below
Interface items Description
Phase 1 In the first phase of configuration, the communicating
parties establish an authenticated and secured channel
among themselves, that is, establish an IKE SA.
Local ID type The ID type is used by the product during IKE's first
phase of negotiation used to identify itself to the
opposite product. Optional IPaddress or FQDN
Local ID When selecting IP address here it enters local IP
address here, when selecting domain name, it enters
domain name here.
Remote ID Type The type of ID used by the end device during IKE
phase 1 negotiation. Optional "IP Address or domain
name” Between two docking devices, the home end ID
set by one device should be the same as the opposite
end ID set by the other device.
Remote ID When selecting IP address here it enters local IP
address here, when selecting domain name, it enters
domain name here.
Encryption Algorithm
DES
（
Data Encryption Standard
）
The 64bit key is
used to encrypt the message block.
3DES
（
Triple DES
）
Three 64bit DES keys are used to
encrypt the message block.
AES
（
Advanced Encryption Standard
）
This product