5
Figure 360 Advanced configuration
5. Perform advanced connection configuration as described in Table 156.
6. Click Apply.
Table 156 Configuration items
Item Description
Phase 1
Exchange Mode
Select the IKE negotiation mode in phase 1, which can be main or aggressive.
IMPORTANT:
• If the IP address of one end of an IPsec tunnel is obtained dynamically, the IKE
negotiation mode must be aggressive. In this case, SAs can be established as
long as the username and password are correct.
• An IKE peer uses its configured IKE negotiation mode when it is the
negotiation initiator. A negotiation responder uses the IKE negotiation mode of
the initiator.
Authentication
Algorithm
Select the authentication algorithm to be used in IKE negotiation. Options include:
• SHA1—Uses HMAC-SHA1.
• MD5—Uses HMAC-MD5.
To Next Page
Loading...
