Accton Technology Edge-Core VR-200, Руководство пользователя

Страница: 115 / 125

VR-200 16-Port Multi-WAN VPN Router
• 110 •
Encryption Key is 16-bit. If users do not fill up to 16-bit, this filed will be filled up to
16-bit automatically by 0. If 3DES is selected, the Encryption Key is 48-bit. If users
do not fill up to 48-bit, this filed will be filled up to 48-bit automatically by 0.
z
Authentication Key: This field specifies a key used to authenticate IP traffic and the
Authentication Key is generated by users. The hexadecimal value is acceptable in
this field. Both sides must use the same Authentication key. If MD5 is selected, the
Authentication Key is 32-bit. If users do not fill up to 32-bit, this filed will be filled up
to 32-bit automatically by 0. If SHA1 is selected, the Authentication Key is 40-bit. If
users do not fill up to 40-bit, this filed will be filled up to 40-bit automatically by 0.
IKE with Preshared Key
z
Keying Mode: IKE with Preshared Key (automatic). IKE is an Internet Key
Exchange protocol that is used to negotiate key material for SA (Security
Association). IKE uses the Pre-shared Key field to authenticate the remote IKE peer.
z
Phase 1 DH Group: Phase 1 is used to create a security association (SA). DH
(Diffie-Hellman) is a key exchange protocol that is used during phase 1 of the
authentication process to establish pre-shared keys. There are three groups of
different prime key lengths. Group 1 is 768 bits, Group 2 is 1,024 bits and Group 5 is