Allied Telesis NetScreen Routers Network Router User Manual


 
Page 10 | AlliedWare™ OS How To Note: VPNs with NetScreen routers
Dynamic
address
If you have a dynamic address, then on
the Advanced Settings page:
z at the top, select Aggressive Mode
z in the middle, select the Use Perfect
Forward Secrecy checkbox and set
the DH Group for PFS to Group 2
z towards the bottom, enter a Local
ID. This ID lets the NetScreen
router validate the Allied Telesis
router. Therefore, it must match
the Remote User ID value that you
enter on the NetScreen router
Then click the OK button.
Static
address
Check the summary.
If you have a static address, the
summary now includes the Perfect
Forward Secrecy setting.
9. Check the settings again