User`s guide

BaseWall, Tel: [phone], Fax: [phone]
49
VPN Configuration – Advanced settings
When you use the tunnel to BaseWall unit or tunnel to BaseWall client configurations you don’t need
to use the Advanced Settings. Only when you want to make adjustments for a IPSec tunnel to a third
party unit you can choose here settings that may be required.
• Tunnel Name– In order to distinguish the tunnel, you have to give “Tunnel” a name..
• PPPoE Session– If you are using PPPoE to make the connection, and some ISP offers multiple PPPoE
session, you can select these PPPoE sessions to construct VPN tunnels.
• Enable setting – Only when the tunnel check box is enabled, the tunnel can be connected.
• Phase 1 DH Group – Use DH Group 1(768-bits),DH Group 2(1024-bits), Group 5 (1536-bits) to
generate IPSec SA keys.
• Phase 1 Encryption Method– There are three data encryption methods : DES,3DES,AES
• Phase 1 Authentication Method– There are two authentication available. MD5 and SHA1 (Secure
Hash Algorithm)
• Phase 1 SA Life Time– By default the Security Association lifetime is 3600 Sec.
• Force Deletion after Expiry – Once SA get expired, tunnel will be removed and related resources
will be released to the system.