ZXV10 H11X (V1.0)Home Gateway User’s Manual
96
Confidential and Proprietary Information of ZTE CORPORATION
Peer Authentication
Adopted key negotiation mode; This product supports
two key negotiation modes:
Shared Secret
and
RSA
Signature
(select
Main Mode
for
IKE Mode
). The
RSA Signature
(for main mode) is recommended.
Peer Key
Key, a character string at a certain length consisting of
number and English letter; When
Shared Secret
is
selected from
Peer Authentication
, you must select
a field (note to keep this field secret carefully) for
Shared Secret completely consistent with that of the
peer party. When
RSA
is selected for
Peer
Authentication
, both parties should fill in the peer
RSA key. For specific configuration, refer to the
relevant introduction in
Setting RSA Key
. Fill in it as
actually required.
Use Perfect Forward Secrecy (PFS)
Whether to select
Use Perfect Forward Secrecy
,
and select whether to adopt Perfect Forward Secrecy
at the second sub-phase of key negotiation or future
key update; to ensure there is no statistic law feature
between the new key and the key to expire, this
option is selected preferentially.
IPSec Manual
(manual connection configuration)
Note:
The ordinary user is not recommended to
adopt manual configuration, unless this user is an
information security specialist or has special
requirements.
Security Parameter Index: Local
Local security index No.; The IPSec security protection
policy is composed of several independent SAs. Each
