Motorola AP-7131N-FGR, Руководство по продукции

Страница: 266 / 708

AP-7131N-FGR Access Point Product Reference Guide 6-38
4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE
Settings screen.
IKE Authentication
Algorithm IKE provides data authentication and anti-replay services for the
VPN tunnel.
• SHA1 - Enables Secure Hash Algorithm. No keys are
required to be manually provided.
IKE Authentication
Passphrase If you selected Pre-Shared Key as the authentication mode, you
must provide a passphrase.
IKE Encryption
Algorithm Select the encryption and authentication algorithms for the VPN
tunnel from the drop-down menu.
• 3DES - Enables the 3DES encryption algorithm. No keys are
required to be manually provided.
• AES 128-bit - Uses the Advanced Encryption Standard
algorithm with 128-bit. No keys are required to be manually
provided.
• AES 192-bit - Enables the Advanced Encryption Standard
algorithm with 192-bit. No keys are required to be manually
provided.
• AES 256-bit - Uses the Advanced Encryption Standard
algorithm with 256-bit. No keys are required to be manually
provided.
Key Lifetime The number of seconds the key is valid. At the end of the lifetime,
the key is renegotiated.
The access point forces renegotiation every 3600 seconds. There is
no way to change the renegotiation value. If the IKE Lifetime is
greater than 3600, the keys still get renegotiated every 3600
seconds.
Diffie Hellman Group Select a Diffie-Hellman Group to use. The Diffie-Hellman key
agreement protocol allows two users to exchange a secret key over
an insecure medium without any prior secrets. Two algorithms
exist, 768-bit and 1024-bit. Select one of the following options:
• Group 1 - 768 bit - Somewhat faster than the 1024-bit
algorithm, but secure enough in most situations.
• Group 2 - 1024 bit - Somewhat slower than the 768-bit
algorithm, but much more secure and a better choice for
extremely sensitive situations.