45
Figure: IKE Global Setup
Settings – IKE Global Setup.
IP Global
Setting
•
Enable Setting
– If you checked the box, this will start VPN
global setting.
•
ISAkmp Port
– Internet Security Association and Key Protocol
Management (ISAkmp) is designed to negotiate, establish,
modify and delete security associations and their attributes. In
particular, it was assigned UDP port 500 by the IANA.
•
Phase 1 DH Group
–
Use DH Group 1(768-bits), DH Group
2(1024-bits), Group 5 (1536-bits) to generate IPSec SA keys.
•
Phase 1 Encryption Method
– There are three data
encryption methods available, DES, 3DES and AES.
•
Phase 1 Authentication Method
– There are two
authentication available. MD5 and SHA1 (Secure Hash
Algorithm)
•
Phase 1 SA Life Time
– By default the Security Association
lifetime is 28800 Sec
.
