QNO QVF7411, User Manual

Page: 139 / 268

S
S
S
S
L
L
/
/
I
I
P
P
S
S
e
e
c
c
V
V
P
P
N
N
Q
Q
o
o
S
S
R
R
o
o
u
u
t
t
e
e
r
r
132
Perfect Forward Secrecy: When users check the PFS option, make sure to activate
the PFS feature of the VPN device and that VPN Client as well.
Phase 1/Phase 2 DH Group: This option allows users to select Diffie-Hellman
groups: Group 1/ Group 2/ Group 5.
Phase1/Phase2 Encryption: This option allows users to set this VPN channel to
use any encryption mode. Note that this parameter must be identical to that of the
remote encryption parameter: DES (64 - bit encryption mode), 3DES (128-bit
encryption mode), AES (the standard of using security code to encrypt information).
It supports 128-bit, 192-bit, and 256-bit encryption keys.
Phase 1/Phase 2 Authentication: This authentication option allows users to set
this VPN tunnel to use any authentication mode. Note that this parameter must be
identical to that of the remote authentication mode: “MD5” or “SHA1”.
Phase1 SA Life Time: The life time for this exchange code is 28800 seconds (or 8
hours) by default. This allows the automatic generation of other exchange passwords
within the valid time of the VPN connection so as to guarantee security.
Phase2 SA Life Time: The life time for this exchange code is 3600 seconds (or 1
hour) by default. This allows the automatic generation of other exchange passwords
within the valid time of the VPN connection so as to guarantee security.
Preshared Key: For the Auto (IKE) option, enter a password of any digit or character