User's Manual

41
IKE Life Cycle
Set IKE life cycle
86400 s
Local ID Type
Select IP address/User
FQDN/FQDN Fill in the ID
according to the ID type
(USERFQDN is standard email
format)
IP Address
Peer ID Type
Select IP address/User
FQDN/FQDN
IP Address
Authentication method
Select shared key/digital
certificate
Shared key
Key
Set IPSec VPN key
N/A
XAUTH Parameters (Advanced Option)
XAUTH Mode
Click to enable XAUTH mode
Disable
XATUTH username
User defines XATUTH
username
N/A
XATUTH password
User defines XATUTH
password
N/A
MODECFG
Click to enable MODECFG
Disable
Phase II Parameters
IPSec Strategy
Multiple strategies available
3DES-MD5-96
IPSec Life Cycle
Set IPSec life cycle
3600 s
Perfect Forward Secrecy
(PFS) (Advanced Option)
Select disable/Group 1/Group
2/Group 5
Disable (this needs to match
the server)
Link Detection Parameters (Advanced Option)
DPD Interval
Set time interval.
60 s
DPD Timeout
Set the timeout for dropped
packets.
180 s
ICMP Detection Server
Set ICMP detection server
N/A
ICMP Detection Local IP
Set ICMP detection local IP
N/A
ICMP Detection Interval
Set ICMP Detection Interval
60 s
ICMP Detection Timeout
Set ICMP detection timeout
5 s
ICMP Detection Retries
Set ICMP detection max.
retries
10
The security level of three encryption algorithms ranks successively: AES, 3DES, DES. The
implementation mechanism of encryption algorithm with stricter security is complex and slow
arithmetic speed. DES algorithm can satisfy the ordinary safety requirements.