VPN configuration
69
Configuration Guide
Enabling VPN (branch office)
Complete this procedure to enable VPN.
Procedure steps
Step
Action
1
From the BSG navigation pane, select
Configuration, VPN, VPN Settings,
VPN Policy
tab.
The VPN Policy pane appears.
2
From
the
VPN Status
list
,
select Enabled.
3
Click
Apply
.
End
Authentication
Select the preferred authentication method.
Select None to indicates no authentication method is required.
Select HMAC-MAC5, the message authentication code is calculated using
the MD5 cryptographic hash function. This cryptographic hash function
has some additional security properties with a 128-bit hash value, which is
commonly used to check the integrity of files.
Select HMAC-SHA1, the message authentication code is calculated using
the SHA1 algorithm. This cryptographic hash function computes a
condensed digital representation to a high degree of probability.
IPSec Mode
Select the IPSec mode.
Select Tunnel, IPSec encrypts the IP header and the Payload.
Select Transport, IPSec encrypts only the Payload.
Preferred Forward Secrecy
Select the Preferred Forward Secrecy (PFS). Select one of the following
options:
•
Select None – IKE does not use any PFS.
•
PFS Group 1 – IKE uses a 768-bit Diffie-Hellman Prime modules
group for performing the new Diffie-Hellman exchange.
•
PFS Group 2 – IKE uses a 1024-bit Diffie-Hellman Prime modules
group for performing the new Diffie-Hellman exchange.
•
PFS Group 5 – IKE uses a 1536-bit Diffie-Hellman Prime modules
group for performing the new Diffie-Hellman exchange.
Life Time
Select the lifetime unit. It can be seconds, minutes, or hours.
The default value is seconds.
Life Time Value
Type the lifetime value.
The default value is 800 seconds.
Anti Replay
Displays the anti replay status.
Options:
•
ENABLE - activates the anti-replay functionality of the security
protocol.
•
DISABLE - deactivates the anti-replay functionality of the security
protocol.
The default value is ENABLE.
Variable
Value
Summary of Contents for BSG12aw 1.0
Page 14: ...14 Introduction NN47928 500 NN47928 500 ...
Page 22: ...22 WAN configuration NN47928 500 NN47928 500 ...
Page 54: ...54 SIP configuration NN47928 500 NN47928 500 ...
Page 80: ...80 QoS configuration NN47928 500 NN47928 500 ...
Page 82: ...82 Advanced configuration NN47928 500 NN47928 500 ...
Page 110: ...110 LAN advanced configuration NN47928 500 NN47928 500 ...
Page 144: ...144 IP routing advanced configuration NN47928 500 NN47928 500 ...
Page 152: ...152 DHCP advanced configuration NN47928 500 NN47928 500 ...
Page 164: ...164 QoS advanced configuration NN47928 500 NN47928 500 ...
Page 176: ...176 VPN advanced configuration NN47928 500 NN47928 500 ...
Page 200: ...200 Port management advanced configuration NN47928 500 NN47928 500 ...
