InHand InRouter 600 Series, Руководство пользователя

Страница: 21 / 52

InRouter 600 Series User’s Manual www.inhandnetworks.com
21
Click “Add” to add a new IPSec Tunnel:
Basic Parameters: set basic parameters of IPSec tunnel.
Tunnel Name: name IPSec tunnel, the default is IPSec_tunnel_1.
Destination Address: set to VPN server IP/domain, e.g.: the domain provided by GJJ is gjj-ovdp.3322.org.
Startup Modes: select Auto Activated.
Negotiation Mode: optional between Main Mode and Aggressive Mode. Generally, select Main Mode.
IPSec Protocols: optional among ESP, AH. Generally, select ESP.
IPSec Mode: optional between Tunnel Mode and Transport Mode. Generally, select Tunnel Mode.
Tunnel Type: optional among Host-Host, Host-Subnet, Subnet-Host and Subnet-Subnet.
Local Subnet: IPSec local subnet protected. E.g.: 172.16.16.0.
Local Net Mask: IPSec local Net Mask protected. E.g.: 255.255.255.252.
Remote Subnet: IPSec remote subnet protected. E.g.: 172.16.0.0.
Remote Net Mask: IPSec remote Net Mask protected. E.g.: 255.240.0.0.
Phase 1 Parameters: configure parameters during the Phase 1 of IPSec negotiation.
IKE Policy: optional between 3DES-MD5-96 and AES-MD5-96, suggest selecting 3DES-MD5-96.
IKE Lifetime: the default is 86400 seconds.
Local ID Type: optional among FQDN, USERFQDN, IP address, suggest selecting IP address.
Remote ID Type: optional among FQDN, USERFQDN, IP address, suggest selecting IP address.
Authentication Type: optional between Shared Key and Certificate, generally choose Shared Key.
Key: set IPSec VPN negotiating key.
Phase 2 Parameters: configure parameters during the Phase 2 of IPSec negotiation.
IPSec Policy: optional between 3DES-MD5-96 and AES-MD5-96, suggest selecting 3DES-MD5-96.
IPSec Lifetime: the default is 3600 seconds.
Perfect Forward Encryption: Optional among None, GROUP1, GROUP2 and GROUP5. This parameter should match
with the server, generally, select “None”.
Click “Save” to finish adding IPSec Tunnel: