LevelOne GBR-4001, Руководство пользователя

Страница: 147 / 191

Chapter 12 VPN
http://www.level1.com Page 142
Intranet mask: Subnet mask of locally protected Intranet.
Security options:
Pre-shared key: Pre-shared key used by negotiation, with the maximum of 128 characters.
Encryption and authentication algorithm 1: The preferred encryption and authentication
algorithm that can be used for negotiation in the second phase.
Figure 12_17 IPSec Advanced options -- Main mode
First phase
Negotiation mode: Sets the negotiation mode in the first phase, with the options: main mode
and aggressive mode. When selecting gateway-to-gateway connection, select the main
mode. When the connection mode is dynamic connection to the gateway, other party
dynamically connecting to the local machine, select the aggressive mode.
Survival time: Sets the survival time of IKE SA, which is at least 600 seconds. When the
remaining time is 540 seconds, the IKE SA will be negotiated again.