Chapter 10. Configuring VPN
Internet Security Router User
’s Manual
86
Name
Encryption
Algorithm
Authentication
Algorithm
Diffie-Hellman
Group
Key
Management
Life time
(secs)
ike-preshared-
des-sha1-dh2
DES
SHA-1
2
Pre-shared
Keys
3600
ike-preshared-
des-md5-dh2
DES
MD5
2
Pre-shared
Keys
3600
ike-preshared-
3des-sha1-dh1
3DES
SHA-1
1
Pre-shared
Keys
3600
ike-preshared-
3des-md5-dh1
3DES
MD5
1
Pre-shared
Keys
3600
ike-preshared-
des-sha1-dh1
DES
SHA-1
1
Pre-shared
Keys
3600
ike-preshared-
des-md5-dh1
DES
MD5
1
Pre-shared
Keys
3600
ike-preshared-
3des-sha1-dh5
3DES
SHA-1
5
Pre-shared
Keys
3600
ike-preshared-
3des-md5-dh5
3DES
MD5
5
Pre-shared
Keys
3600
ike-preshared-
des-sha1-dh5
DES
SHA-1
5
Pre-shared
Keys
3600
ike-preshared-
des-md5-dh5
DES
MD5
5
Pre-shared
Keys
3600
Pre-configured IPSec proposals
IPSec proposals decide the type of encryption and authentication for the traffic that flows between the
endpoints of the tunnel.
Table 10.3 lists the default IPSec proposals available on the Internet Security Router
Table 10.3. Pre-configured IPSec proposals in the Internet Security Router
Name
Encryption
Algorithm
Authentication
Algorithm
Encapsulation Life time
(Mbytes/secs)
ipsec-esp-3des-sha1
3DES
SHA-1
ESP
75/3600
ipsec-esp-3des-md5
3DES
MD5
ESP
75/3600
ipsec-esp-des-sha1
DES
SHA-1
ESP
75/3600
ipsec-esp-des-md5
DES
MD5
ESP
75/3600
ipsec-ah-sha1
-
SHA-1
AH
75/3600
ipsec-ah-md5
-
MD5
AH
75/3600
ipsec-esp-3des
3DES
-
ESP
75/3600
ipsec-esp-des
DES
-
ESP
75/3600
ipsec-esp-sha1
-
SHA-1
ESP
75/3600
ipsec-esp-md5
-
MD5
ESP
75/3600