Hirschmann HiSecOS EAGLE20 - Page 241

Virtual Private Network > Connections
Virtual Private Network
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
241
Encryption Specifies the IPsec encryption algorithm that the device uses.
Possible values:
 any
The device accepts every algorithm when you specify it to be a
responder, and uses various pre-defined algorithms as the initiator.
 des
The device uses the Data Encryption Standard (DES) block cipher for
encryption of message data with a 56-bit key.
 des3
The device uses the Triple DES block cipher for encryption of message
data which applies the 56-bit key, from DES, 3 times to each block.
 aes128 (default setting)
The device uses the Advanced Encryption Standard (AES) with a block
size of 128 bits, and a key length of 128 key bits.
 aes192
The device uses the AES with a block size of 128 bits, and a key length
of 192 key bits.
 aes256
The device uses the AES with a block size of 128 bits, and a key length
of 256 key bits.
 aes128gcm64
The device uses the AES-Galois/Counter Mode (GCM) with a 64 bit
Integrity Check Value (ICV) and 128 key bits.
 aes128gcm96
AES-GCM with a 96 bit ICV and 128 key bits.
 aes128gcm128
AES-GCM with a 128 bit ICV and 128 key bits.
 aes192gcm64
AES-GCM with a 64 bit ICV and 192 key bits.
 aes192gcm96
AES-GCM with a 96 bit ICV and 192 key bits.
 aes192gcm128
AES-GCM with a 128 bit ICV and 192 key bits.
 aes256gcm64
AES-GCM with a 64 bit ICV and 256 key bits.
 aes256gcm96
AES-GCM with a 96 bit ICV and 256 key bits.
 aes256gcm128
AES-GCM with a 128 bit ICV and 256 key bits.
Lifetime [s] Specifies the lifetime, in seconds, of the IPsec security association between
two network devices to support secure communication. The device
establishes a security association after exchanging a set of pre-defined
keys.
Possible values:
 300..28800 (default setting: 3600 )
The default setting is 1 hour and the maximum setting is 8 hours.
Parameters Meaning