Field
Description
ation or the hash algorithms is based on the author’s knowledge
and opinion at the time of creating this User Guide. In particular,
the quality of the algorithms is subject to relative aspects and
may change due to mathematical or cryptographic develop-
ments.
DH Group
Only for Phase-1 (IKE) Parameters
The Diffie-Hellman group defines the parameter set used as the
basis for the key calculation during phase 1. "MODP" as sup-
ported by Teldat devices stands for "modular exponentiation".
Possible values:
•
+ =
: During the Diffie-Hellman key calculation, mod-
ular exponentiation at 768 bits is used to create the encryption
material.
•
=
: During the Diffie-Hellman key calculation,
modular exponentiation at 1024 bits is used to create the en-
cryption material.
•
$ =
: During the Diffie-Hellman key calculation,
modular exponentiation at 1536 bits is used to create the en-
cryption material.
Lifetime
Create a lifetime for phase 1 keys.
As for RFC 2407, the default value is eight hours, which means
the key must be renewed once eight hours have elapsed.
The following options are available for defining the Lifetime:
• Input in Seconds: Enter the lifetime for phase 1 key in
seconds. The value can be a whole number from 0 to
2147483647. The default value is
.
• Input in kBytes: Enter the lifetime for phase 1 keys as amount
of data processed in kBytes. The value can be a whole num-
ber from 0 to 2147483647. The default value is
. The default
value as per RFC is used
seconds and
Kbytes are
entered.
Authentication Method Only for Phase-1 (IKE) Parameters
Select the authentication method.
18 VPN
Teldat GmbH
344
bintec Rxxx2/RTxxx2
