Page 26 / 155
Scroll up to view Page 21 - 25
26
Remote Subnet
The subnet of the remote VPN gateway’s local network. It
can be a host, a partial subnet, or a whole subnet.
Remote Netmask
The subnet of the remote VPN gateway’s local network.
It can be a host, a partial subnet, or a whole subnet.
Remote Gateway
The WAN IP address of remote VPN gateway.
Home > VPN Settings > Tunnel > Method >IKE
Using the Configuration Menu
Local Subnet
The subnet of the VPN gateway’s local network. It can be a
host, a partial subnet or a whole subnet.
Local Netmask
Local netmask combined with local subnet to form a subnet
domain.
Aggressive Mode
Enabling this mode will accelerate establishing tunnel, but
the device will have less security.
Tunnel Name
Current tunnel name.
IKE Proposal index
Click the button to setup a set of frequent-used IKE proposals
and select from the set of IKE proposals for the tunnel.
IPSec Proposal
index
Click the button to setup a set of frequent-used IPSec proposals
and select from the set of IKE proposals for the tunnel.
Preshared Key
The first key that supports IKE mechanism of both VPN
gateways for negotiating further security keys. The pre-
shared key must be the same for both endpoint gateways.
Page 27 / 155
27
Using the Configuration Menu
Home > VPN Settings > Tunnel > Method > IKE > Select IKE Proposal
IKE Proposal index
Proposal Name
DH Group
Encrypt algorithm
Auth algorithm
A list of selected proposal indexes from the IKE proposal pool
listed below.
There are three groups that can be selected: group 1
(MODP768), group 2 (MODP1024), and group 5 (MODP1536).
There are two algorithms that can be selected: 3DES and
DES.
There are two algorithms that can be selected: SHA1 and
MD5.
This is the name used to classify the IKE proposal.
Page 28 / 155
28
Using the Configuration Menu
Home > VPN Settings > Tunnel > Method > IKE > Select IKE Proposal
Continued...
Life Time
Enter in the life time value.
Life Time Unit
There are two units that can be selected: second and KB.
Proposal ID
The identifier of IKE proposal can be chosen for adding the
corresponding proposal to the dedicated tunnel.
Add
to
Click it to add the chosen proposal indicated by proposal ID
to IKE Proposal index list.
Page 29 / 155
29
Using the Configuration Menu
Home > VPN Settings > Tunnel > Method > IKE > Select IPSEC Proposal
IPSec Proposal
index
A list of selected proposal indexes from the IPSec proposal
pool listed below.
Proposal Name
DH Group
There are three groups that can be selected: group 1
(MODP768), group 2 (MODP1024), and group 5 (MODP1536).
Encap protocol
There are two protocols that can be selected: ESP and AH.
Encrypt algorithm
There are two algorithms that can be selected: 3DES and
DES.
This is the name used to classify the IPSec Proposal
Auth algorithm
There are two algorithms that can be selected: SHA1 and
MD5.
Page 30 / 155
30
Using the Configuration Menu
Home > VPN Settings > Tunnel > Method > IKE > Select IPSEC Proposal
Continued...
Life Time
Enter in a life time value.
Life Time Unit
There are two units that can be selected: second and KB.
Proposal ID
The identifier of IPSec proposal can be chosen for adding the
corresponding
proposal to the dedicated tunnel.
Add
to
Click it to add the chosen proposal indicated by proposal ID
to IPSec Proposal index list.
19216811.live