Netopia 4752, Administration Manual

Page: 151 / 284

Virtual Private Networks (VPNs) 12-9
■
You must enter an Encryption Key if the Encr yption Transform is DES. The key for DES must be a
hexadecimal string of 16 characters, using Hex characters only: '0'-'9', 'A'-'F' and 'a' - 'f'. No key entr y
appears if the encr yption transform is NULL.
■
You must specify an Authentication Type . The default is ESP , and the choices are ESP , None , or AH . ESP
provides confidentiality over the IP payload and optional authentication of the IP payload and ESP header.
AH (Authentication Header) provides authentication over the immutable par ts of the IP header, AH header
and the IP payload. ESP is preferred.
■
You must specify an Authentication Transform if the Authentication Type is anything other than None. The
default is HMAC-MD5-96 , and the choices are HMAC-MD5-96 or HMAC-SHA1-96 for both AH and ESP.
■
You must specify an Authentication Key if the Authentication Type is anything other than None. The key
must be an ASCII string of up to 48 characters for both HMAC-MD5-96 and HMAC-SHA1-96.
Key : The key is a hexadecimal entr y of 16 bytes (32 characters of input) for MD5 and 20 bytes (40
characters of input) for SHA1. It is not possible to view the Encr yption Keys or Authentication Key once they
have been set.
■
Press COMMIT to return to the Add Connection Profile screen.
■
Select IP Profile Parameters .
IPsec Encryption & Authentication Options
Encryption Transform... DES
Encryption Key:
Authentication Type... ESP
Authentication Transform... HMAC-MD5-96
Authentication Key:
COMMIT CANCEL
Enter a key of 16 Hex digits, e.g. '1234567890ABCDEF'