LevelOne FBR-1411TX, Руководство пользователя

Страница: 36 / 56

36
value ranges from 300 seconds to 172,800 seconds.
Encapsulation Protocol
There are three protocols can be selected: ESP, AH and ESP+AH.
pfs:
Perfect Forward Secrecy (PFS), allow IKE to re-exchange a key for IPSec instead of direct use
ISAKMP key as the IPSec key during phase 2 of IKE negotiation. The ISAKMP key is derived at the
end of phase 1 of IKE negotiation. This setting must be same between initiator and responder or a VPN
tunnel can not be created.
Aggressive mode:
During phase 1 of IKE negotiation, IKE operates in main mode or aggressive mode. Aggressive mode
is a reduced version of main mode and more unsafe.
Pre-shared key
It is the first key that supports IKE mechanism of both VPN gateways for negotiating further security
keys. The pre-shared key must be same for both end gateways.
Remote ID
It is optional. Some VPN gateways require ID for authentication. For example, to connect to SonicWall
VPN gateway, user should input serial number here. But to connect to Cisco VPN gateway, user
should input IP@domain .
Local ID
It is optional. Some VPN gateways require local ID for authentication. For example, NetScreen VPN
router serves as the initiator and can inquire if the responder is specific gateway or host that should be
dedicated by the local ID.