MP1800-10 3G Router User Manual
Maipu Confidential & Proprietary Information
Page 68 of 95
Remote Net
: IPSec remote protect subnet, such as 192.168.20.0
(network number or single host, depending on the peer IPSEC tunnel
configuration)
Remote Mask
: IPSec remote protect subnet mask, such as
255.255.255.0, select 24;
Tunnel Mode
: You can select ESP protocol and AH protocol. Usually, we
select ESP protocol.
Encryption Algorithm
: The encryption algorithm used by IPSec phase-2.
You can select
DES and 3DES, BLOWFISH, AES128, AES192, AES256,
NULL. DES (for RM1800-10C, RM1800-10W, RM1800-10).
Hash Algorithm
: The authentication algorithm used by IPSec phase-2.
You can select MD5, SHA1, SHA2-256, and NULL. The default value is
MD5.
PFS key group
: Perfect forward encryption (DH algorithm). You can
select off, 768bit, 1024bit, and 1536bit. The parameter needs to match
the peer.
Lifetime
: IPSec phase-2 life period. After the life period ends, IPSEC
initiates the phase-2 parameter re-negotiation.
Pre-share key configuration
Pre-share key setting
After clicking
Add
on the above figure, enter the following interface for
configuring the pre-share key:
Pre-share key