![background image](http://html.mh-extra.com/html/zyxel-communications/vmg5313-b10a/vmg5313-b10a_user-manual_944375256.webp)
Chapter 22 VPN
VMG5313-B10A/-B30A Series User’s Guide
256
Encryption
Algorithm
Select which key size and encryption algorithm to use in the IKE SA. Choices are:
DES
- a 56-bit key with the DES encryption algorithm
3DES
- a 168-bit key with the DES encryption algorithm
AES
-
128
- a 128-bit key with the AES encryption algorithm
AES
-
196
- a 196-bit key with the AES encryption algorithm
AES
-
256
- a 256-bit key with the AES encryption algorithm
The VMG and the remote IPSec router must use the same key size and encryption
algorithm. Longer keys require more processing power, resulting in increased latency and
decreased throughput.
Integrity
Algorithm
Select which hash algorithm to use to authenticate packet data. Choices are
MD5
,
SHA1
.
SHA
is generally considered stronger than
MD5
, but it is also slower.
Select Diffie-
Hellman Group
for Key Exchange
Select which Diffie-Hellman key group you want to use for encryption keys. Choices for
number of bits in the random number are: 768, 1024, 1536, 2048, 3072, 4096.
The longer the key, the more secure the encryption, but also the longer it takes to encrypt
and decrypt information. Both routers must use the same DH key group.
Key Life Time
Define the length of time before an IPSec SA automatically renegotiates in this field.
A short SA Life Time increases security by forcing the two VPN gateways to update the
encryption and authentication keys. However, every time the VPN tunnel renegotiates, all
users accessing remote resources are temporarily disconnected.
Phase 2
Encryption
Algorithm
Select which key size and encryption algorithm to use in the IKE SA. Choices are:
DES
- a 56-bit key with the DES encryption algorithm
3DES
- a 168-bit key with the DES encryption algorithm
AES
-
128
- a 128-bit key with the AES encryption algorithm
AES
-
192
- a 196-bit key with the AES encryption algorithm
AES
-
256
- a 256-bit key with the AES encryption algorithm
Select
ESP_NULL
to set up a tunnel without encryption. When you select
ESP_NULL
,
you do not enter an encryption key.
The VMG and the remote IPSec router must use the same key size and encryption
algorithm. Longer keys require more processing power, resulting in increased latency and
decreased throughput.
Integrity
Algorithm
Select which hash algorithm to use to authenticate packet data. Choices are
MD5
and
SHA1
.
SHA
is generally considered stronger than
MD5
, but it is also slower.
Table 101
Security > IPSec VPN: Add/Edit
LABEL
DESCRIPTION
Содержание VMG5313-B10A
Страница 15: ...15 PART I User s Guide ...
Страница 16: ...16 ...
Страница 32: ...Chapter 2 The Web Configurator VMG5313 B10A B30A Series User s Guide 32 ...
Страница 40: ...Chapter 4 Tutorials VMG5313 B10A B30A Series User s Guide 40 ...
Страница 71: ...71 PART II Technical Reference ...
Страница 72: ...72 ...
Страница 78: ...Chapter 5 Network Map and Status Screens VMG5313 B10A B30A Series User s Guide 78 ...
Страница 106: ...Chapter 6 Broadband VMG5313 B10A B30A Series User s Guide 106 ...
Страница 162: ...Chapter 9 Routing VMG5313 B10A B30A Series User s Guide 162 ...
Страница 180: ...Chapter 10 Quality of Service QoS VMG5313 B10A B30A Series User s Guide 180 ...
Страница 198: ...Chapter 11 Network Address Translation NAT VMG5313 B10A B30A Series User s Guide 198 ...
Страница 210: ...Chapter 14 Interface Group VMG5313 B10A B30A Series User s Guide 210 ...
Страница 218: ...Chapter 15 USB Service VMG5313 B10A B30A Series User s Guide 218 ...
Страница 232: ...Chapter 17 Firewall VMG5313 B10A B30A Series User s Guide 232 ...
Страница 240: ...Chapter 19 Parental Control VMG5313 B10A B30A Series User s Guide 240 ...
Страница 250: ...Chapter 21 Certificates VMG5313 B10A B30A Series User s Guide 250 ...
Страница 296: ...Chapter 23 Voice VMG5313 B10A B30A Series User s Guide 296 ...
Страница 300: ...Chapter 24 Log VMG5313 B10A B30A Series User s Guide 300 ...
Страница 308: ...Chapter 27 xDSL Statistics VMG5313 B10A B30A Series User s Guide 308 ...
Страница 318: ...Chapter 30 Remote Management VMG5313 B10A B30A Series User s Guide 318 ...
Страница 322: ...Chapter 32 TR 064 VMG5313 B10A B30A Series User s Guide 322 ...
Страница 332: ...Chapter 36 Log Setting VMG5313 B10A B30A Series User s Guide 332 ...
Страница 335: ...Chapter 37 Firmware Upgrade VMG5313 B10A B30A Series User s Guide 335 Figure 176 Error Message ...
Страница 336: ...Chapter 37 Firmware Upgrade VMG5313 B10A B30A Series User s Guide 336 ...
Страница 352: ...Chapter 40 Troubleshooting VMG5313 B10A B30A Series User s Guide 352 ...
Страница 353: ...353 PART III Appendices Appendices contain general information Some information may not apply to your device ...
Страница 354: ...354 ...
Страница 374: ...Appendix B Wireless LANs VMG5313 B10A B30A Series User s Guide 374 ...
Страница 390: ...Appendix E Legal Information VMG5313 B10A B30A Series User s Guide 390 ...