Digi TransPort LR54-AA401, Руководство пользователя

Страница: 69 / 169

Routing
TransPort LR User Guide 86
l
AES – 128 bits
l
AES – 192 bits
l
AES – 256 bits
The default value is AES – 128 bits .
n
The Encapsulating Security Payload (ESP) Diffie-Hellman group for the IPsec tunnel.This
setting must match the Diffie-Hellman group configured on the remote device. The Diffie-
Hellman group options are:
l
None
l
Group 5 (1536 bits)
l
Group 14 (2048 bits)
l
Group 15 (3072 bits)
l
Group 16 (4096 bits)
l
Group 17 (6144 bits)
l
Group 18 (8192 bits)
The default value is Group14 .
The larger the number of bits, the more secure the IPsec tunnel. However, a larger bit length
requires more computing power, which can slow down the tunnel negotiation and
performance.
n
The shared key the device and the remote device use to authenticate each other.
IKE configuration settings
n
The IKE mode.
l
Main
l
Aggressive
The default option is Main .
n
The IKE authentication protocols to use for the IPsec tunnel negotiation. The authentication
options are:
l
SHA1
l
SHA256
The default is SHA1 .
You can select more than one authentication protocol. IKE negotiates with the remote device
which to use. This setting does not need to match the IKE authentication protocols configured
on the remote device, but at least one of the authentication protocols must be configured on
the remote device.
n
The IKE encryption protocols to use for the IPsec tunnel negotiation. The encryption options
are:
l
AES – 128 bits
l
AES – 192 bits
l
AES – 256 bits