DIR-825/AC Wireless AC1200 Dual Band Gigabit Router with
3G/LTE Support and USB Port
User Manual
Configuring via Web-based Interface
Parameter Description
First phase DHgroup
type
A Diffie-Hellman key group for Phase 1. Select a value from the drop-
down list.
IKE-SA lifetime
The lifetime of IKE-SA keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should exceed the value specified in the IPsec-SA lifetime field.
Specify 0 if you don't want to limit the lifetime of the keys.
The second phase
Second phase
encryption algorithm
Select encryption algorithm from the drop-down list.
Authentication
algorithm
Select authentication algorithm from the drop-down list.
Enable PFS
Select the checkbox to enable the PFS option (Perfect Forward
Secrecy). If the checkbox is selected, a new encryption key exchange
will be used for Phase 2. This option increases the security level of
data transfer.
Second phase
PFSgroup type
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
down list. The field is available, if the Enable PFS checkbox is
selected.
IPsec-SA lifetime
The lifetime of IPsec-SA keys in seconds. After the specified period it
is required to renegotiate the keys. Specify 0 if you don't want to limit
the lifetime of the keys.
If you need to specify IP addresses of local and remote subnets for creating a tunnel, click the Add
button in the Tunneled networks section.
Figure 155. The page for adding an IPsec tunnel. The Tunneled networks section.
In the line displayed, you can specify the following parameters:
Parameter Description
Local subnet
A local subnet IP address and mask.
Remote subnet A remote subnet IP address and mask.
Page 202 of 257
To Next Page
Loading...
