19216811.liveChapter 3
Configuring the DOCSIS Residential Gateway
58
4042831 Rev A
Field
Description
Phase 1 encryption
Allows you to select the form of encryption to secure the VPN
connection between endpoints. Select from the following five
encryption types:
DES
3DES
AES-128
AES-192
AES-256
You may choose any encryption type as long as the other end of the
VPN tunnel uses the same method.
Phase 1 authentication
Allows you to select an authentication type for another level of
security. Select one of the following authentication types:
MD5
SHA
You may choose either authentication type as long as the other end of
the VPN tunnel uses the same method.
Note:
SHA is recommended because it is more secure.
Phase 1 SA lifetime
Allows you to enter the number of seconds for an individual rotating
key to last until a re-key negotiation between each endpoint occurs.
Smaller lifetimes are generally more secure since it would give a
hacker a smaller amount of time to try to crack the key. However,
key negotiation does take up bandwidth, so network throughput is
sacrificed with small lifetimes. The default setting is 28,800 seconds.
Phase 2 encryption
Allows you to select the form of encryption to secure the VPN
connection between endpoints. Select from the following five
encryption types:
DES
3DES
AES-128
AES-192
AES-256
You may select any form of encryption as long as long as the other
end of the VPN tunnel uses the same method.
Note:
3DES encryption is commonly used, but AES is recommended
because it is very difficult to crack.