D-Link DFL-100 Инструкция по эксплуатации онлайн [72/97] 17499

VPN Statistics

IPSEC Statistics

The DFL-100 maintains a table containing statistics concerning the IPSec

protocol connection between the WAN and the LAN. These statistics can be

viewed on the IPSEC Statistics table, as shown below:

IPSEC (Internet Protocol Security) uses the Internet Key Exchange (IKE)

protocol to perform a two-phase negotiation. The two phases are creatively

termed Phase 1 (also called Main Mode) and Phase 2 (also called Quick

Mode). The purpose of Phase 1 is to protect the security negotiations by

establishing a Security Association (called an IPSEC SA). Phase 2 begins

upon completion of Phase 1 negotiation. The messages exchanged during

Phase 2 negotiations are protected by a previously established IPSEC SA, the

secure channel or tunnel created in Phase 1.

Phase 1 negotiation involves three basic steps:

1. Negotiation of protection protocol

2. Key exchange

3. Authentication