Configuration Guide

24
Parameter Description
IKE DH Group IKE Diffie-Hellman (DF) key computation, or exponential key
agreement, to be used between two entities.
 MODP768
 MODP1024
 MODP1536
 MODP2048
 MODP4096
IKE Authentication Authentication algorithm
 SHA1
 SHA1_160
 SHA256_96
 SHA256
ESP Encryption Encapsulating Security Payload (ESP) – member of the IPsec
protocol suite that provides origin authenticity, integrity, and
confidentiality protection of packets.
 AES128
 AES256
 3DES
 DES
ESP DH Group ESP Diffie-Hellman (DF) key computation, or exponential key
agreement, to be used between two entities.
 MODP768
 MODP1024
 MODP1536
 MODP2048
 MODP4096
ESP
Authentication
ESP Authentication algorithm
 SHA1
 SHA1_160
 SHA256_96
 SHA256
Key Life IPsec security association (SA) renegotiation time.
Format: Seconds, Minutes, Hours or Days.
IKELifetime IKE security association renegotiation time.
Format: Seconds, Minutes, Hours or Days.
RekeyMargin Renegotiation time before the expiry of IKE
life time (negotiate
the IKE security association time before the expiry of IKE life
time).
Format: Seconds, Minutes, Hours or Days.
Dpdaction DPD stands for dead peer detection (DPD) protocol.
Determines what action to take when a gateway exception
occurs.
 None