Technical data

96
Sample Configuration
Refer to the section
Sample Configurations,
Chapter 3 of this manual, page 57. The routers SOHO (the target
router) and HQ (the remote router) are configured in the same manner as shown in chapter 3, but the
following encryption commands are added. Don’t forget to save the configuration and reboot the router (
save
and
reboot
commands).
Remember that the transmit key (tx) of SOHO is the receive key (rx) of HQ. Inversely, the receive key of
SOHO is the transmit key of HQ.
Use this sample configuration with the additional encryption commands as a guideline to configure your own
routers.
Enable encryption on the router HQ
Sample:
login admin
remote setEncryption dese rx 1111111111111111 SOHO
remote setEncryption dese tx 2222222222222222 SOHO
save
reboot
Enable encryption for the router SOHO
Sample:
remote setEncryption dese tx 1111111111111111 HQ
login admin
remote setEncryption dese rx 2222222222222222 HQ
save
reboot
Diffie-Hellman Encryption
With Diffie-Hellman encryption, each router has an encryption file that is associated with a public key providing
768-bit security. The predefined keys can be replaced by the user. The key files have a suffix of “num” by
convention (e.g.; dh96.num).
Configuration Notes
Simply add the encryption command to your standard configuration. For Diffie-Hellman, the encryption
command is:
remote setEncryption
DESE_1_KEY|DESE_2_KEY [
<fileName>
]
|
<
remoteName
>
Observe the following guidelines:
• DESE_1_KEY specifies that the same key is used in both directions and DESE_2_KEY specifies that the
keys are different. Having the same keys in both directions can significantly reduce time needed to
compute the DES keys from the Diffie-Hellman exchange.