User`s guide

Chapter 3 Tutorials: 3G Modem Setup & VPN Wizard

LAN-Cell 2 User’s Guide

3.2.4 VPN Wizard IPSec Setting (IKE Phase 2)

Use this screen to specify the authentication, encryption and other settings needed to negotiate

a phase 2 IPSec SA.

Figure 28 VPN Wizard: IPSec Setting

The following table describes the labels in this screen.

Pre-Shared Key Type your pre-shared key in this field. A pre-shared key identifies a

communicating party during a phase 1 IKE negotiation. It is called "pre-shared"

because you have to share it with another party before you can communicate

with them over a secure connection.

Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62

hexadecimal ("0-9", "A-F") characters. You must precede a hexadecimal key

with a "0x (zero x), which is not counted as part of the 16 to 62 character range

for the key. For example, in "0x0123456789ABCDEF", 0x denotes that the key

is hexadecimal and 0123456789ABCDEF is the key itself.

Both ends of the VPN tunnel must use the same pre-shared key. You will

receive a PYLD_MALFORMED (payload malformed) packet if the same pre-

shared key is not used on both ends.

Back Click Back to return to the previous screen.

Next Click Next to continue.

Table 12 VPN Wizard: IKE Tunnel Setting (continued)

LABEL DESCRIPTION

Table 13 VPN Wizard: IPSec Setting

LABEL DESCRIPTION

Encapsulation Mode Tunnel is compatible with NAT, Transport is not.

Tunnel mode encapsulates the entire IP packet to transmit it securely. A Tunnel

mode is required for gateway services to provide access to internal systems.

Tunnel mode is fundamentally an IP tunnel with authentication and encryption.

Transport mode is used to protect upper layer protocols and only affects the

data in the IP packet. In Transport mode, the IP packet contains the security

protocol (AH or ESP) located after the original IP header and options, but before

any upper layer protocols contained in the packet (such as TCP and UDP).

IPSec Protocol Select the security protocols used for an SA.

Both AH and ESP increase LAN-Cell processing requirements and

communications latency (delay).