Billion BiPAC 8500, Руководство пользователя

Страница: 121 / 177

117
Advanced Options
On the IPSec Edit screen, click
Advanced Options
link to change the settings.
IKE Mode: Set IKE (Internet key Exchange) mode to Main mode or Aggressive mode. This IKE
provides secured key generation and key management.
IKE Proposal
Hash Function: It is a Message Digest algorithm which coverts any length of a message into a
unique set of bits. It is widely used MD5 (Message Digest) and SHA-1 (Secure Hash Algorithm)
algorithms. SHA1 is more resistant to brute-force attacks than MD5, however it is slower. SHA1 is
more resistant to brute-force attacks than MD5, however it is slower
• MD5:
A one-way hashing algorithm that produces a 128−bit hash.
• SHA1: A one-way hashing algorithm that produces a 160−bit hash
Encryption:
Select the encryption method from the drop-down menu. There are several options,
DES, 3DES and AES (128, 192 and 256). 3DES and AES are more powerful but increase the
latency.
• DES: Stands for Data Encryption Standard and uses 56 bits encryption method.