User guide

Chapter 6 – RouteFinder Software
Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 119
VPN > IPSec > Manual
Add a Manual Connection
Add Manual Connection
Connection Name
Enter a text name that will identify the connection for you.
Compression
Check the compression checkbox to enable IPCOMP, the compression algorithm.
Authentication Method
Decides the encryption and authentication algorithms to be used for the respective security
services. Options are:
Authentication only: 1. AH using MD5 –128 bit key
2. AH using SHA1 – 160 bit key
Encryption only: 1. ESP (Encapsulating Security Payload) using AES
2. ESP using DES – 56 bit key
3. ESP using 3DES – 192 bit key
Encryption & Authentication: 1. ESP using 3DES for encryption and MD5 for authentication
2. ESP using 3DES for encryption and SHA1 for
authentication
3. ESP using 3DES for encryption and AH MD5 for
authentication
4. ESP using 3DES for encryption and AH SHA1 for
authentication
Note: Encryption without authentication is not recommended since it is not secure.
SPI Base
Security Parameter Index identifies a manual connection. The SPI is a unique identifier in the SA
(Secure Association – a type of secure connection) that allows the receiving computer to select the
SA under which a packet will be processed. The SPI Base is a number needed by the manual
keying code. Enter any 3-digit hexadecimal number, which is unique for a security association. It
should be in the form 0xhex (a number between 0x100 - 0xfff is recommended). If you have more
than one manual connection, then the SPI Base must be different for each one.