Delta DX-3001H9-V, Руководство пользователя

Страница: 48 / 67

C h a p t e r 3 F u n c t i o n s
3 - 2 9
_3
Description Default
Name
Input the name of IPSec connection, it cannot be repeated with other
connection’s name. Name can be up to 20 characters long.
Enable
Enable or disable this connection. False
IPSec Type
Set up the working mode of the IPSec, currently support “Net to Net” only Net-to-Net
IPSec Role
Set up the role of the router in IPSec, currently support “Client” only Client
Local WAN Interface
Local end WAN interface, system will auto assign it base on connection status WAN
Peer WAN Address
IP/domain name of end opposite
Local Subnet
IPSec local protects subnet and subnet mask, i.e. 192.168.1.0/24
Peer Subnet
IPSec opposite end protects subnet and subnet mask, i.e.192.168.7.0/24;
Local ID
Local end identification, IP and domain name are available
Peer ID
Opposite end identification, IP and domain name are available
IKE Encryption
IKE phase encryption mode. Options are “3DES”, “DES”, “AES(128bit)” and
“AES(256bit)”
3DES
IKE Integrity
IKE phase integrity solution. Options are “MD5”,”SHA1” and “SHA2(256)” MD5
IKE DH Group
DH exchange algorithm. Options are “Group1(768)”, “Group2(1024)” ,
“Group5(1536)”, “Group14(2048) ”, “Group15(3072)”, “Group16(4096)”,
“Group17(6144)” and “Group18(8192)”
Group2(1024)
IKE Lifetime
Set IKE life time, current unit is second, range is 120~86400s 120
ESP Encryption
ESP phase encryption mode. Options are “3DES”, “DES”, “AES(128bit)” and
“AES(256bit)”
3DES
ESP Integrity
ESP phase integrity solution. Options are “MD5” and ”SHA1” MD5
PFS
Enable or disable PFS(Perfect Forward Secrecy) Enabled