Nortel BSG12aw 1.0, Руководство по настройке

Страница: 60 / 200

60 VPN configuration
NN47928-500 NN47928-500
22 From the Encryption list, select an IPSec encryption.
23 From the Authentication list, select the preferred authentication method.
24 From the Preferred Forward Secrecy list, select a PFS option.
25 From the Life Time list, select the Seconds , Minutes , or Hours .
26 In the Life Time Value field, enter the life time value.
27 Click Apply .
End
Variable definitions
The following table describes the variables and values for configuring client termination.
Variable Value
Policy Action Select this check box to create a policy action.
Policy Name Type a IPsec policy name.
Each policy must have a unique name.
The range is 1 to 63 characters.
Policy name ALL is not allowed.
Existing Policies Select an existing policy for the IPsec policy.
Interface Name Select the WAN interface for which you want to apply the policy.
Policy Status Select the status of the IPsec policy.
Select INACTIVE to disable the policy on the specified interface.
Select ACTIVE to enable the policy on the specified interface.
The default is INACTIVE.
Policy Type Select the policy type. Select one of the following:
• IKE XAUTH
• IKE Pre-Shared
IKE Phase 1 Proposal table
IPSec Encryption Select the IPSec Encryption. Select one of the following options:
• Data Encryption Standard (DES) – a standard for encrypting data that
uses a 64 bit key to encrypt data, but only 56 bits are used. This
standard is considered inadequate for data protection.
• Triple Data Encryption Standard (3DES) – processes each block of
data using a different key each time, resulting in a significantly more
secure message.
• Advanced Encryption Standard (AES128, AES192, AES256) – has a
fixed block size of 128 bits and a key size of 128, 192 or 256 bits. Due
to the fixed block size of 128 bits, AES operates on a 4x4 array of
bytes.
Select DES if you require network speed.
Select 3-DES if you require network security.