Cisco RV132W - Page 110

VPN
Site-to-Site IPsec VPN
Cisco RV132W ADSL2+ Wireless-N and RV134W VDSL2 Wireless-AC VPN Router Administration Guide 108
6
• Key-In, Key-Out—Enter the encryption key of the inbound and outbound
policy. The length of the key depends on the encryption algorithm chosen:
- 3DES—24 characters
- AES-128—16 characters
- AES-192—24 characters
- AES-256—32 characters
• Integrity Algorithm—Select the algorithm used to verify the integrity of the
data.
• Key-In, Key Out—Enter the integrity key (for ESP with Integrity-mode) for
the inbound and outbound policy. The length of the key depends on the
algorithm chosen:
- MD5—16 characters
- SHA-1—20 characters
- SHA2-256—32 characters
- None, SHA2-384, SHA2-512
STEP 7 For an Auto policy type, enter the settings in the Auto Policy Parameters section.
SA-Lifetime—Enter the duration of the Security Association in seconds. After the
specified number of seconds, the Security Association is renegotiated. The
default value is 3600 seconds. The minimum value is 30 seconds.
• Protocol—Select the protocol from the drop down list: ESP or AH
• Encryption Algorithm—Select the algorithm used to encrypt the data.
• Integrity Algorithm—Select the algorithm used to verify the integrity of the
data.
• PFS Key Group—Check the Enable box to enable Perfect Forward Secrecy
(PFS) to improve security. While slower, this protocol helps to prevent
eavesdroppers by ensuring that a Diffie-Hellman exchange is performed for
every phase-2 negotiation.
• DH Group—Specify the DH Group algorithm used when exchanging a pre-
shared key. The DH Group sets the strength of the algorithm in bits. Ensure
that the DH Group is configured identically on both sides of the IKE policy.
• Select IKE Policy—Choose the IKE policy that will define the
characteristics of the SA negotiation.