User guide

IPsec User Guide
10 2120028
IPSec Gateway 64.163.70.30 Fill in the IPSec of the VPN
concentrator.
Pre-shared Key 1 SierraWireless 8 to 31 case sensitive ASCII
characters
Negotiation Mode 1 The choices in drop down options
are main or aggressive.
IKE Encryption Algorithm 7 You can choose other options
like, Blowfish, 3 DES, Cast 128
and AES.
3DES or AES can be used for
stronger encryption.
IKE Authentication Algorithm 2 Three different authentication
algorithms are among the drop-
down choices.
1-MD5 is for minimal security and
2-SH-1 is higher security. 5-SHA-
256 is also an option.
IKE Key Group 2 Different Key Groups are, 1-DH1,
2-DH2 and 3-DH3.
IKE SA Life Time 7200 (seconds) Enter the lifetime of VPN of how
long it is valid. “0” reflects no
expiry.
Local Address Type 1 Choose from drop-down menu.
• “1” indicates Modem Public
IP. It is the IP of the device
behind the modem, when the
modem is in public mode.
• “2” indicates Host Private
Subnet of the device behind
the modem on the same
subnet, when the modem is
in private mode.
• “5” indicates Single Address.
• “17” indicates Subnet
Address.
Local Address 0.0.0.0 Local Address of the device
connected to the modem.
Local Address - end or mask 0.0.0.0 Subnet address with the Subnet
Mask
Remote Address Type 17 Network behind the Concentrator.
Table 2-1: Configuration Parameters in AceManager
Name Default Value Description