Tp-Link TL-R600VPN Инструкция по эксплуатации онлайн [53/82] 39137

TL-R600VPN SafeStream

Gigabit Broadband VPN Router User Guide

Encryption Algorithm:

Select the Encryption Algorithm for IPsec policy.

The default value is “Auto”.

IKE Security Policy:

Select the IKE Security Policy for IPsec policy.

PFS Group:

Select the PFS (Perfect Forward Security) for IKE

mode to enhance security. This setting should

match the remote peer. With PFS feature, IKE

negotiates to create a new key in Phase2. As it is

independent of the key created in Phase1, this key

can be secure even when the key in Phase1 is

de-encrypted. Without PFS, the key in Phase2 is

created based on the key in Phase1 and thus once

the key in Phase1 is de-encrypted, the key in

Phase2 is easy to be de-encrypted, in this case,

the communication secrecy is threatened.

Lifetime:

Specify IPsec SA Lifetime for IKE mode.

Status:

Enable or disable the entry.

z Manual Mode

Security Protocol:

Select the Security Protocol for IPsec.

Authentication

Algorithm:

Select the Authentication Algorithm for IPsec policy. The

default value is “SHA1”.

Encryption

Algorithm:

Select the Encryption Algorithm for IPsec policy. The

default value is “AES256”.

Incoming SPI:

Specify the Incoming SPI (Security Parameter Index)

manually. The Incoming SPI here must match the

Outgoing SPI value at the other end of the tunnel, and

vice versa.

In Authentication

Key:

Specify the inbound AH Authentication Key manually if AH

protocol is used in the corresponding IPsec Proposal. The

inbound key here must match the outbound AH