User`s manual

Chapter 4: Configuration
75
Advanced Option
This function is only available after completed creating an IPSec account. Click Advanced Option to change
the following settings:
IKE (Internet key Exchange) Mode: Select IKE mode to Main mode or Aggressive mode. This IKE provides
secured key generation and key management.
IKE Proposal:
Hash Function: It is a Message Digest algorithm which coverts any length of a message into a unique set of
bits. It is widely used MD5 (Message Digest) and SHA-1 (Secure Hash Algorithm) algorithms. SHA1 is more
resistant to brute-force attacks than MD5, however it is slower.
§ MD5: A one-way hashing algorithm that produces a 128_bit hash.
§ SHA1: A one-way hashing algorithm that produces a 160_bit hash
Encryption: Select the encryption method from the pull-down menu. There are several options, DES, 3DES
and AES (128, 192 and 256). 3DES and AES are more powerful but increase latency.
§ DES: Stands for Data Encryption Standard, it uses 56 bits as an encryption method.
§ 3DES: Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits as an encryption
method.
§ AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits as encryption
method.
Diffie-Hellman Group: It is a public-key cryptography protocol that allows two parties to establish a shared
secret over an unsecured communication channel (i.e. over the Internet). There are three modes, MODP 768-
bit, MODP 1024-bit and MODP 1536-bit. MODP stands for Modular Exponentiation Groups.