Caimore CM520-8AW, Руководство пользователя

Страница: 52 / 83

Xiamen Caimore Communication Technology Co.,Ltd
2 F, 37#, Wanghai Road, Software Park 2, Xiamen,China (361009)
------------------------------------------------------------------------------
----------------------------------------
Tel:+86 592 5901215 web:www.caimore.com/emain.asp 52 52
 IPsec port
：
when start L2tp at the same time, L2tp monitor port and
L2tp default port is 1701.
 IPsec Identity
：
the identification supplied to the opposite side when
connects negotiation
Phase 1
：
establish IPsec SA through consultation in the first stage, and supply
IPSec service for data communication.
 Work Mode
：
Main and Aggressive mode.
 PFS
：
Precise forwarding secrecy. Avoid affecting the whole
communication system when single key leaks
Debug ： Enable debug information
 NAT Traversal
：
If this gateway doesn’t connect with public network
directly, but transmit through IP original address, please use “NAT
Traversal”
 Authentication
：
Pre-shared Key mode and Certificates X509 mode.
 Cipher
：
DES, 3DES, AES and AES128

Hash
：
SHA1 and MD5
 DH group
：
Group1, Group2, Group5, Group14, Group15, Group16,
Group17 and Group18
SA lifetime (s): phase negotiation valid time
 Key
：
when Pre-shared Key
，
it is shared key.
 Password
：
the secret key is the one of certification when the
authentication mode is Certificate X509
Phase 2
：
Phase 2 is protected by phase 1, any message that was not
protected by phase 1 SA will be refused. In phase 2, negotiate the
communication protocol fast, changing secret key and establish communication.
DH group
：
Group1
、
Group2
、
Group5
、
Group14
、
Group15
、
Group16
、
Group17 and Group18
Lifetime(S): Phase negotiation valid time.

Cipher
：
DES, 3DES, AES and AES128

Hash
：
SHA1 and MD5
Other
 DPD Timeout(s)
：
the default time of dps timeout is 120s.
 IPComp: IP Payload Compression Protocol