Baicells EP3011 - Figure 43: Ipsec; Figure 44: Ipsec; Table 11: Ipsec

26
Figure 43: IPSec
To configure an IPSec policy for this CPE, select the ADD POLICY button (Figure 44). Enter the policy name,
remote gateway, local and remote subnets, and pre-shared key for the VPN connection. The Advance Settings
offer additional parameters such as key exchange version, IKE encryption method, etc. Refer to Table 11.
Figure 44: IPSec
Table 11: IPSec
Field Name
Description
Enable
Click on the check box to enable IPSec
Policy Name
Enter a policy name using up to 32 characters
Remote Gateway
IP address of the remote gateway
Local Subnet
Optional: IP address of the local subnet
Remote Subnet
Optional: IP address of the remote subnet
Pre-Shared Key
Up to 128 characters
Key Exchange Version
Internet Key Exchange (IKE) encryption method version 2 or version 1. IKE is a protocol
used to ensure security for virtual private network (VPN) negotiation and remote host or
network access.
Negotiation Mode
Initiator mode or Responder mode
IKE Encryption
3des, aes128, aes192, or aes256
IKE DH Group
modp768, modp1024, modp1536, modp2048, or modp4096