Filter
Top Products
Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2
Virtual Private Networking 8-5
201-10301-02, May 2005
Remote
These parameters apply to the target remote FWG114P v2, VPN gateway,
or VPN client.
Remote Identity Type
Use this field to identify the remote FWG114P v2. You can choose one of
the following four options from the drop-down list:
• By its Internet (WAN) port IP address.
• By its Fully Qualified Domain Name (FQDN) — your domain name.
• By a Fully Qualified User Name — your name, e-mail address, or
other ID.
• By DER ASN.1 DN — the binary DER encoding of your ASN.1 X.500
Distinguished Name.
Remote Identity Data
This field lets you identify the target remote FWG114P v2 by name.
IKE SA Parameters
These parameters determine the properties of the IKE Security
Association.
Encryption Algorithm
Choose the encryption algorithm for this IKE policy:
• DES is the default.
• 3DES is more secure.
Authentication Algorithm
If you enable Authentication Header (AH), this menu lets you to select from
these authentication algorithms:
• MD5 is the default.
• SHA-1 is more secure.
Authentication Method
You may select Pre-Shared Key or RSA Signature.
Pre-Shared Key
Specify the key according to the requirements of the Authentication
Algorithm you selected.
• For MD5, the key length should be 16 bytes.
• For SHA-1, the key length should be 20 bytes.
RSA Signature
RSA Signature requires a certificate.
Diffie-Hellman (D-H) Group
The DH Group setting determines the bit size used in the key exchange.
This must match the value used on the remote VPN gateway or client.
SA Life Time
The amount of time in seconds before the Security Association expires;
over an hour (3600) is common.
Table 8-1. IKE Policy Configuration Fields
Field Description