Digi IX20 - Page 502

Virtual PrivateNetworks(VPN) IPsec
IX20 User Guide
502
ii. Set the type of encryption to use during phase 1:
(config vpn ipsec tunnel ipsec_example ike phase1_proposal 0)>
cipher value
(config vpn ipsec tunnel ipsec_example ike phase1_proposal 0)>
where value is one of:
n
3des
n
aes128
n
aes128gcm128
n
aes128gcm64
n
aes128gcm96
n
aes192
n
aes192gcm128
n
aes192gcm64
n
aes192gcm96
n
aes256
n
aes256gcm128
n
aes256gcm64
n
aes256gcm96
n
null
The default is 3des.
iii. Set the type of hash to use during phase 1 to verify communication integrity:
(config vpn ipsec tunnel ipsec_example ike phase1_proposal 0)>
hash value
(config vpn ipsec tunnel ipsec_example ike phase1_proposal 0)>
where value is one of:
n
md5
n
sha1
n
sha256
n
sha384
n
sha512
The default is sha1.
iv. Set the type of Diffie-Hellman group to use for key exchange during phase 1:
i. Use the ?to determine available Diffie-Hellman group types:
(config vpn ipsec tunnel ipsec_example ike phase1_proposal 0)>
dh_group ?
curve25519
curve448
ecp192