Filter
Top Products
12-12 Administration Guide
Interoperation with other features
■ Address serving is not supported through IPsec Tunnels.
■ AH is not supported through an interface that has NAT applied to it. NAT may be applied to the inner
payload.
■ AH is not supported through an interface which is either Unnumbered or Numbered with a dynamically
assigned address unless the Local Tunnel Endpoint address is specified in the Advanced IP Profile Options
screen.
Encryption Support
Encryption is a method for altering user data into a form that is unusable by anyone other than the intended
recipient. The recipient must have the means to decrypt the data to render it usable to them. The encryption
process protects the data by making it difficult for any third party to get at the original data.
Netopia PPTP is fully compatible with Microsoft Point-to-Point Encryption (MPPE) data encryption for user data
transfer over the PPTP tunnel. Microsoft Windows NT Server provides MPPE encryption capability only when
Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) is enabled. Netopia complies with this
feature to allow MPPE only when MS-CHAP is negotiated. MS-CHAP and MPPE are user-selectable options in the
PPTP Tunnel Options screen. If either the client or the server side specifies encryption, then encryption
becomes mandatory for both.
Netopia’s ATMP implementation supports Data Encryption Standard (DES) data encryption for user data
transfer over the ATMP tunnel between two Netopia routers. The encryption option, none or DES, is a selectable
option in the ATMP Tunnel Options screen.
MS-CHAP V2 and 128-bit strong encryption
Notes:
■ The Netopia 4753 supports 128-bit (“strong”) encryption when using PPTP tunnels.
ATMP does not have an option of using 128-bit MPPE. If you are using ATMP between two Netopia routers
you can optionally set 56-bit DES encryption.
■ When you choose MS-CHAP as the authentication method for a PPTP tunnel, the Netopia router will start
negotiating MS-CHAPv2. If the router or VPN adapter client you are connecting to does not support
MS-CHAPv2, the Netopia router will fall back to MS-CHAPv1, or, if the router or VPN adapter client you are
connecting to does not support MPPE at all, the PPP session will be dropped. This is done automatically
and transparently.