Nortel BSR222, Configuration, Page: 207 / 451

Chapter 13 VPN 207
Nortel Business Secure Router 222 Configuration — Basics
An added feature of the ESP is payload padding, which further protects
communications by concealing the size of the packet being transmitted.
Key management
Your Business Secure Router uses IKE (ISAKMP) key management in order to
set up a VPN.
Table 47 AH and ESP
ESP AH
Encryption DES (default)
Data Encryption Standard (DES) is a
widely used method of data encryption
using a secret key. DES applies a 56-bit
key to each 64-bit block of data.
3DES
Triple DES (3DES) is a variant of DES,
which iterates three times with three
separate keys (3 x 56 = 168 bits),
effectively doubling the strength of DES.
AES
Advanced Encryption Standard is a
newer method of data encryption that
also uses a secret key. This
implementation of AES applies a 128-bit
key to 128-bit blocks of data during
phase 1. You can configure the device
to use a 128-bit, 192-bit or 256-bit key
for phase 2. AES is faster than 3DES.
Select NULL to set up a phase 2 tunnel
without encryption.
Authentication MD5 (default)
MD5 (Message Digest 5) produces a
128-bit digest to authenticate packet
data.
MD5 (default)
MD5 (Message Digest 5)
produces a 128-bit digest to
authenticate packet data.
SHA1
SHA1 (Secure Hash Algorithm)
produces a 160-bit digest to
authenticate packet data.
SHA1
SHA1 (Secure Hash
Algorithm) produces a 160-bit
digest to authenticate packet
data.
Select MD5 for minimal security and SHA-1 for maximum security.