Справочник Пользователя для Billion Electric Company 8501
SHDSL VPN Firewall Bridge/Router
Chapter 4: Configuration
Advanced Option
This function is only available after completed creating an IPSec account. Click Advanced Option to
change the following settings:
change the following settings:
IKE (Internet key Exchange) Mode: Select IKE mode to Main mode or Aggressive mode. This IKE
provides secured key generation and key management.
provides secured key generation and key management.
IKE Proposal:
Hash Function: It is a Message Digest algorithm which coverts any length of a message into a unique
set of bits. It is widely used MD5 (Message Digest) and SHA-1 (Secure Hash Algorithm) algorithms.
SHA1 is more resistant to brute-force attacks than MD5, however it is slower.
set of bits. It is widely used MD5 (Message Digest) and SHA-1 (Secure Hash Algorithm) algorithms.
SHA1 is more resistant to brute-force attacks than MD5, however it is slower.
MD5: A one-way hashing algorithm that produces a 128−bit hash.
SHA1: A one-way hashing algorithm that produces a 160−bit hash
Encryption: Select the encryption method from the pull-down menu. There are several options, DES,
3DES and AES (128, 192 and 256). 3DES and AES are more powerful but increase latency.
3DES and AES (128, 192 and 256). 3DES and AES are more powerful but increase latency.
DES: Stands for Data Encryption Standard, it uses 56 bits as an encryption method.
3DES: Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits as an encryption
method.
method.
AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits as
84