Robustel GoRugged R2000 - Page 62

Robustel GoRugged R2000 User Guide
RT_UG_R2000_v.1.2.0 15.12.2015 61 /120
Confidential
IKE Settings
Item
Description
Default
Authentication
Algorithm
Select from “MD5” and “SHA1”to be used in IKE negotiation.
MD5: Uses HMAC-SHA1.
SHA1: Uses HMAC-MD5.
MD5
Encrypt Algorithm
Select from “3DES”, “AES128” and “AES256”to be used in IKE negotiation.
3DES: Uses the 3DES algorithm in CBC mode and 168-bit key.
AES128: Uses the AES algorithm in CBC mode and 128-bit key.
AES256: Uses the AES algorithm in CBC mode and 256-bit key.
3DES
IKE DH Group
Select from “MODP (1024)” and “MODP (1536)”to be used in key
negotiation phase 1.
MODP (1024): Uses the 1024-bit Diffie-Hellman group.
MODP (1536): Uses the 1536-bit Diffie-Hellman group.
MODP
(1024)
Authentication Type
Select from “PSK”, “CA”, “xAuth PSK” and “xAuth CA” to be used in IKE
negotiation.
PSK: Pre-shared Key.
CA: Certification Authority.
xAuth: Extended Authentication to AAA server.
PSK
PSK Secret
Enter the pre-shared key.
Null
Local ID Type
Select from “IP Address”, “FQDN” and “User FQDN” for IKE negotiation.
“Default” stands for “IP Address”.
IP Address: Uses an IP address as the ID in IKE negotiation.
FQDN: Uses an FQDN type as the ID in IKE negotiation. If this option is
selected, type a name without any at sign (@) for the local security gateway,
e.g., test.robustel.com.
User FQDN: Uses a user FQDN type as the ID in IKE negotiation. If this option
is selected, type a name string with a sign “@” for the local security
gateway, e.g., test@robustel.com.
Default
Remote ID Type
Select from “IP Address”, “FQDN” and “User FQDN” for IKE negotiation.
IP Address: Uses an IP address as the ID in IKE negotiation.
FQDN: Uses an FQDN type as the ID in IKE negotiation. If this option is
selected, type a name without any at sign (@) for the local security gateway,
e.g., test.robustel.com.
User FQDN: Uses a user FQDN type as the ID in IKE negotiation. If this option
is selected, type a name string with a sign “@” for the local security
gateway, e.g., test@robustel.com.
Default
IKE Lifetime
Set the lifetime in IKE negotiation.
Before an SA expires, IKE negotiates a new SA. As soon as the new SA is set
up, it takes effect immediately and the old one will be cleared automatically
when it expires.
86400
Private Key Password
Enter the private key.
Null
Username
User name used for xAuth.
Null
Password
Password used for xAuth.
Null