Field
Description
the "LLC" and "subaddress information elements".
13.1.2 Phase-1 Profiles
A list of all configured tunnel profiles is displayed in the VPN->IPSec->Phase-1 Profiles
menu.
In the Default column, you can mark the profile to be used as the default profile.
13.1.2.1 New
Choose the New (at Create new IKEv1 Profile or Create new IKEv2 Profile ) button to
create additional profiles.
The menu VPN->IPSec->Phase-1 Profiles->New consists of the following fields:
Fields in the Phase-1 (IKE) Parameters menu
Field
Description
Description
Enter a description that uniquely defines the type of rule.
Proposals
In this field, you can select any combination of encryption and
message hash algorithms for IKE phase 1 on your device. The
combination of six encryption algorithms and four message
hash algorithms gives 24 possible values in this field. At least
one proposal must exist. Therefore the first line of the table
cannot be deactivated.
Encryption algorithms (Encryption):
•
C3
(default value): 3DES is an extension of the DES al-
gorithm with an effective key length of 112 bits, which is
rated as secure. It is the slowest algorithm currently suppor-
ted.
•
)8!
: Twofish was a final candidate for the AES
(Advanced Encryption Standard). It is rated as just as secure
as Rijndael (AES), but is slower.
•
(8!
: Blowfish is a very secure and fast algorithm.
Twofish can be regarded as the successor to Blowfish.
•
3)
: CAST is also a very secure algorithm, marginally
slower than Blowfish, but faster than 3DES.
13 VPN
Gigaset Communications GmbH
266
hybird 120 Gigaset Edition