Motorola AP-7131N-FGR, Руководство по продукции

Страница: 259 / 708

Configuring Access Point Security 6-31
3. Configure the Manual Key Settings screen to modify the following:
NOTE When entering Inbound or Outbound encryption or authentication keys, an
error message could display stating the keys provided are “weak”. Some
attack tools invoke a dictionary to hack keys based on commonly used
words. To avoid entering a weak key, try to not to produce a key using
commonly used terms and attempt to mix alphabetic and numerical key
attributes when possible.
AH Authentication AH provides data authentication and anti-replay services for the
VPN tunnel. Select the required authentication method from the
drop-down menu:
• None - Disables AH authentication. The rest of the fields are
not active.
• SHA1 - Enables Secure Hash Algorithm 1, requiring 160-bit
(40-character hexadecimal) keys.
Inbound AH
Authentication Key Configure a key for computing the integrity check on inbound traffic
with the selected authentication algorithm. The key must be 32/40
hexadecimal (0-9, A-F) characters in length. The key value must
match the corresponding outbound key on the remote security
gateway.
Outbound AH
Authentication Key Configure a key for computing the integrity check on outbound
traffic with the selected authentication algorithm. The key must be
32/40 hexadecimal (0-9, A-F) characters in length. The key value
must match the corresponding inbound key on the remote security
gateway.
Inbound SPI (Hex) Enter an up to six-character hexadecimal value to identify the
inbound security association created by the AH algorithm. The
value must match the corresponding outbound SPI value configured
on the remote security gateway.
Outbound SPI (Hex) Provide an up to six-character hexadecimal value to identify the
outbound security association created by the AH algorithm. The
value must match the corresponding inbound SPI value configured
on the remote security gateway.