Technical information

Network Security White Paper ver. G.1.2
Page 71 of 72
Phase 2:
• Security Protocol
ESP: Uses ESP
AH: Uses AH
AH+ESP: Uses dual mode (AH + ESP)
• Authentication Algorithm: Select from HMAC-MD5-96 and HMAC-SHA1-96.
• Encryption Algorithm Permissions: Select from Cleartext, DES, 3DES, AES-128, AES-192, and
AES-256.
• PFS
Inactive: Do not generate the encryption or authentication keys again.
1, 2, or 14: Diffie-Hellman Group for establishing IPsec SA in Phase 2.
• Validity Period: Enter the number between 300 and 172800 seconds.