InHand VG710 - Page 24

InHand VG710 InVehicle Gateway User Manual
19
security of data transmission between communication parties on the Internet. This reduces the risk of
leakage and eavesdropping, ensures the integrity and confidentiality of data, and ensures the security
of service transmission for users.
Scenario: Data is transmitted between the subnet (192.168.1.0/24) of headquarters A and the subnet
(172.16.1.0/24) of customer branch B through gateway A and gateway B. The transmission channels
of gateway A and gateway B are encrypted over IPsec, to protect the security of data transmission
between headquarters A and customer branch B.
Method for encrypting the transmission channels of gateway A and gateway B over IPsec:
Parameter settings:
Gateway A Gateway B
Set IKEv1/v2 parameters Set IKEv1/v2 parameters
ID Custom ID Custom
Encryption
algorithm
AES128
Encryption
algorithm
Same as that of gateway A
Hash algorithm SHA1 Hash algorithm
Diffie-Hellman
key exchange
Group2
Diffie-Hellman
key exchange
Lifecycle 86400 Lifecycle
IPsec policy IPsec policy
Name Custom Name Custom
Encapsulation ESP Encapsulation Same as that of gateway A