D-Link DVG-5402G

DVG-5402G/GF Wireless AC1200 MU-MIMO Dual Band
Gigabit Router with Fiber WAN Port, 3G/LTE Support, 2 FXS
Ports, and USB Port
User Manual
Configuring via Web-based Interface
Parameter Description
Hashing algorithm
Select a hashing algorithm from the drop-down list.
First phase DHgroup
type
A Diffie-Hellman key group for Phase 1. Select a value from the drop-
down list.
IKE-SA lifetime
The lifetime of IKE-SA keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should be greater than the value specified in the IPsec-SA lifetime
field.
IKE version
IKE (Internet Key Exchange) is a protocol of keys exchange between
two hosts of VPN connections. Select a version of the protocol from
the drop-down list.
The Second Phase
Encryption mode
Select an encryption mode from the drop-down list.
Second phase
encryption algorithm
Select an available encryption algorithm from the drop-down list.
Hashing mode
Select a hashing mode from the drop-down list.
Size of hash
The length of the hash in bits.
Hashing algorithm
Select a hashing algorithm from the drop-down list.
Enable PFS
Move the switch to the right to enable the PFS option (Perfect
Forward Secrecy). If the switch is moved to the right, a new
encryption key exchange will be used for Phase 2. This option
enhances the security level of data transfer, but increases the load on
DVG-5402G/GF.
Second phase
DHgroup type
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
down list. The drop-down list is available if the Enable PFS switch
is moved to the right.
IPsec-SA lifetime
The lifetime of Phase 2 keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should be greater than zero.
To specify IP addresses of local and remote subnets for this tunnel, click the ADD button ( ) in
the Tunneled Networks section.
If the IPsec tunnel operates over IKEv1 (1 is selected from the IKE version list in the The First
Phase section), you can create only one subnet.
Page 136 of 311