Filter
Top Products
ZyWALL 50 Internet Security Gateway
VPN/IPSec Setup 23-13
Figure 23-9
Menu 27.1.1.1 — IKE Setup
Table 23-5 Menu 27.1.1.1 — IKE Setup
FIELD DESCRIPTION EXAMPLE
Phase 1
Negotiation
Mode
Press [SPACE BAR] to choose from Main or Aggressive and then press
[ENTER]. See earlier for a discussion of these modes.
Main
Pre-Shared Key ZyWALL gateways authenticate an IKE VPN session by matching pre-shared
keys. Pre-shared keys are best for small networks with fewer than ten nodes.
Enter your pre-shared key here. Enter up to 31 characters. Any character
may be used, including spaces, but trailing spaces are truncated.
Encryption
Algorithm
When DES is used for data communications, both sender and receiver must
know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. ZyWALL
DES encryption algorithm uses a 56-bit key.
Strong Encryption, or Triple DES (3DES), is a variation on DES that uses a
168-bit key. As a result, 3DES is more secure than DES. It also requires more
processing power, resulting in slightly increased latency and decreased
throughput.
Press [SPACE BAR] to choose from 3DES or DES and then press [ENTER].
DES
Authentication
Al ith
MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are hash
lith d
tthtit ktdtTh
SHA1
lithi ll
SHA1
Menu 27.1.1.1 - IKE Setup
Phase 1
Negotiation Mode= Main
Pre-Shared Key=
Encryption Algorithm = DES
Authentication Algorithm = SHA1
SA Life Time (Seconds)= 0
Key Group= DH1
Phase 2
Active Protocol = ESP
Encryption Algorithm = DES
Authentication Algorithm = SHA1
SA Life Time (Seconds)[0: unspecified]= 0
Encapsulation = Tunnel
Perfect Forward Secrecy (PFS)= None
Press ENTER to Confirm or ESC to Cancel: