ZyXEL Communications SBG5500-A, User Manual

Page: 185 / 274

Chapter 10 VPN
SBG5500 Series User’s Guide
185
After phase 1 tunnel is established, IPsec phase 2 negotiations begin. Table 77 on page 185 lists the IPsec
phase 2 proposals provided by a built-in L2TP client in the popular operating systems. The first proposal
that can be supported by the phase 2 setting in the
Default_L2TP_VPN_GW IPsec VPN rule will be
accepted by the SBG. The algorithms in red in Table 77 on page 185 indicate the ones that will be
accepted based on Table 72 on page 174 .
10.8 The L2TP Client Status Screen
Use the L2TP Client Status screen to view details about the L2TP clients. Click Configuration > VPN > L2TP
Client Status to open the following screen.
5 DES/MD5/DH1 DES/SHA1/DH2
6 DES/MD5/DH2
Table 77 Phase 2 IPsec proposals provided by the built-in L2TP client in popular operating systems
(Tunnel Mode/Encryption/Authentication) [Encapsulation = Transport]
WINDOWS XP WINDOWS VISTA WINDOWS 7 IOS 5.1 ANDROID 4.1
1 ESP/3DES/MD5
ESP/3DES/SHA1
ESP/AES/SHA1 ESP/AES/SHA1 ESP/AES/SHA1
ESP/AES/MD5
ESP/3DES/SHA1
ESP/3DES/MD5
ESP/AES/SHA1
ESP/AES/MD5
ESP/3DES/SHA1
ESP/3DES/MD5
ESP/DES/SHA1
ESP/DES/MD5
2 AH/-/SHA1 and
ESP/3DES/- ESP/3DES/SHA1 ESP/3DES/SHA1
3 AH/-/MD5 and
ESP/3DES/- AH/-/SHA1 and
ESP/AES/- ESP/DES/SHA1
4 AH/-/SHA1 and
ESP/3DES/SHA1 AH/-/SHA1 and
ESP/3DES/- ESP/-/SHA1
5 AH/-/MD5 and
ESP/3DES/MD5 AH/-/SHA1 and
ESP/3DES/SHA1 AH/-/SHA1
6 ESP/DES/MD5 ESP/
DES/SHA1 ESP/-/SHA1
AH/-/SHA1
Table 76 Phase 1 IPsec proposals provided by the built-in L2TP client in popular operating systems
(Encryption/Authentication/Key Group)
WINDOWS XP WINDOWS VISTA WINDOWS 7 IOS 5.1 ANDROID 4.1