Use Prefixed Template
Select Custom, IKEv2 High Security, or IKEv2 Medium Security. The setting items are different depending
on the selected template.
Internet Key Exchange (IKE)
IKE is a communication protocol that is used to exchange encryption keys in order to carry out encrypted
communication using IPsec. To carry out encrypted communication for that time only, the encryption algorithm
that is necessary for IPsec is determined and the encryption keys are shared. For IKE, the encryption keys are
exchanged using the Diffie-Hellman key exchange method, and encrypted communication that is limited to
IKE is carried out.
If you selected Custom in Use Prefixed Template, select IKEv2.
Authentication Type
Configure the IKE authentication and encryption.
• Diffie-Hellman Group
This key exchange method allows secret keys to be securely exchanged over an unprotected network.
The Diffie-Hellman key exchange method uses a discrete logarithm problem, not the secret key, to send
and receive open information that was generated using a random number and the secret key.
Select Group1, Group2, Group5, or Group14.
• Encryption
Select DES, 3DES, AES-CBC 128, or AES-CBC 256.
• Hash
Select MD5, SHA1, SHA256, SHA384 or SHA512.
• SA Lifetime
Specify the IKE SA lifetime.
Type the time (seconds) and number of kilobytes (KByte).
Encapsulating Security
• Protocol
Select ESP.
ESP is a protocol for carrying out encrypted communication using IPsec. ESP encrypts the payload
(communicated contents) and adds additional information. The IP packet is comprised of the header and
the encrypted payload, which follows the header. In addition to the encrypted data, the IP packet also
includes information regarding the encryption method and encryption key, the authentication data, and so
on.
• Encryption
Select DES, 3DES, AES-CBC 128, or AES-CBC 256.
• Hash
Select MD5, SHA1, SHA256, SHA384, or SHA512.
• SA Lifetime
Specify the IPsec SA lifetime.
Type the time (seconds) and number of kilobytes (KByte) before the IPsec SA will expire.
• Encapsulation Mode
Select Transport or Tunnel.
• Remote Router IP-Address
Type the IP address (IPv4 or IPv6) of the remote router. Enter this information only when the Tunnel
mode is selected.
440
To Next Page
Loading...
Need help?
General
