HotBrick VPN 1400/2 Network Router User Manual


 
HotBrick, Tel: 305
-
398
-
0888, Fax: 305
-
398
-
5966
Key management
Key – Key Type: there are two key types (manual key and auto key) available for key
exchange management.
Manual Key: If manual key is selected, no key negotiation is needed.
AutoKey (IKE)- There are two types of operation modes that can be used.
Main mode accomplishes a phase one IKE exchange by establishing a secure channel.
Aggressive Mode is another way of accomplishing a phase one exchange. It is faster and simpler
than main mode, but does not provide identity protection for the negotiating nodes.
Perfect Forward Secrecy (PFS) – If PFS is enabled, IKE phase 2 negotiation will generate new key
values for IP traffic encryption & authentication. Preshared Key – This field authenticates the
remote IKE peer.
Key Lifetime- This is specified the lifetime of the IKE generated Key. If the time expires or data is
passed over this volume, a new key will be renegotiated. No limit - 0 – is the default.
48