Draytek Vigor2120 Series User Manual

Vigor2120 Series User’s Guide
281
 AES with Authentication-Use AES encryption
algorithm and apply MD5 or SHA-1 authentication
algorithm.
Advanced - Specify mode, proposal and key life of each
IKE phase, Gateway, etc.
The window of advance setup is shown as below:
IKE phase 1 mode -Select from Main mode and
Aggressive mode. The ultimate outcome is to exchange
security proposals to create a protected secure channel.
Main mode is more secure than Aggressive mode since
more exchanges are done in a secure channel to set up the
IPsec session. However, the Aggressive mode is faster. The
default value in Vigor router is Main mode.
 IKE phase 1 proposal-To propose the local available
authentication schemes and encryption algorithms to
the VPN peers, and get its feedback to find a match.
Two combinations are available for Aggressive mode
and nine for Main mode. We suggest you select the
combination that covers the most schemes.
 IKE phase 2 proposal-To propose the local available
algorithms to the VPN peers, and get its feedback to
find a match. Three combinations are available for
both modes. We suggest you select the combination
that covers the most algorithms.
 IKE phase 1 key lifetime-For security reason, the
lifetime of key should be defined. The default value is
28800 seconds. You may specify a value in between
900 and 86400 seconds.
 IKE phase 2 key lifetime-For security reason, the
lifetime of key should be defined. The default value is
3600 seconds. You may specify a value in between
600 and 86400 seconds.
 Perfect Forward Secret (PFS)-The IKE Phase 1 key
will be reused to avoid the computation complexity in
phase 2. The default value is inactive this function.
Local ID-In Aggressive mode, Local ID is on behalf
of the IP address while identity authenticating with
remote VPN server. The length of the ID is limited to
47 characters.
Index(1-15) - Set the wireless LAN to work at certain time
interval only. You may choose up to 4 schedules out of the
15 schedules pre-defined in Applications >> Schedule
setup. The default setting of this field is blank and the
function will always work.

Draytek Vigor2120 Series Specifications

General

Brand	Draytek
Model	Vigor2120 Series
Category	Network Router
Language	English