____________________________________________________________________________________
____________________________________________________________________________________
34
TAU-4M.IP Subscriber gateway
IKE Encryption algorithm
– select an encryption algorithm from the list: DES, 3DES, Blowfish;
Diffie Hellman group
– select Diffie-Hellman group;
IKE SA lifetime, s
– time that should pass for hosts' mutual re-identification and policy comparison
(other name IKE SA lifetime). Default value is 24 hours (86400 seconds).
Phase 2.
During the second step, key data is generated, hosts negotiate on the utilized policy. This
mode—also called as 'quick mode'—differs from the phase 1 in that it may be established after the first step
only, when all the phase 2 packets are encrypted.
IKE Authentication algorithm
– select an authentication algorithm from the list: HMAC - MD5,
HMAC-SHA1, DES, 3DES;
IKE Encryption algorithm
– select an encryption algorithm from the list: DES, 3DES, Blowfish;
Diffie Hellman group
– select Diffie-Hellman group;
IPSec SA lifetime, s
– time that should pass for data encryption key changeover (other name IPSec
SA lifetime). Default value is 60 minutes (3600 seconds).
To apply a new configuration and store settings into the non-volatile memory, click the
'Apply' button.
To
discard changes click the
'Cancel'
button.
2.6.2.2
'QoS' submenu
In the 'QoS' submenu you may configure traffic processing priorities and queues type.
QoS configuration
Flow control
– enabling/disabling of TCP Flow Control mechanism;
Priority decision
– choice of the traffic prioritization method:
–
DSCP
– mechanism of classification, traffic control and QoS support through priorities;
–
802.1p
– marker (another name is
CoS (Class of Service)
), assigned to the outgoing IP
packets from this interface. It may take values from 0 (the lowest priority) to 7 (the
highest priority).
This IPSec implementation works only when the sender address translation is disabled, as the
client IP address is involved in the key formation.
