IPSec

Enable IPSec

Off*

On

Enable Internet Protocol Security (IPSec).

Base Configuration

Default*

Compatibility

Secure

Set the IPSec base configuration.

Note:  This menu item appears only when Enable IPSec is set to On.

DH (Diffie‑Hellman) Group Proposal

modp2048 (14)*

modp3072 (15)

modp4096 (16)

modp6144 (17)

Set the IPSec base configuration.

Note:  This menu item appears only when Base Configuration is set to Compatibility.

Proposed Encryption Method

3DES

AES*

Set the encryption method.

Note:  This menu item appears only when Base Configuration is set to Compatibility.

Proposed Authentication Method

SHA1

SHA256*

SHA512

Set the authentication method.

Note:  This menu item appears only when Base Configuration is set to Compatibility.

IKE SA Lifetime (Hours)

1

2

4

8

24*

Specify the IKE SA expiry period.

Note:  This menu item appears only when Base Configuration is set to Secure.

IPSec SA Lifetime (Hours)

1

2

4

8

24*

Specify the IPSec SA expiry period.

Note:  This menu item appears only when Base Configuration is set to Secure.

IPSec Device Certificate

default*

Specify an IPSec certificate.

Note:  This menu item appears only when Enable IPSec is set to On.

Pre‑Shared Key Authenticated Connections

Host [x]

Certificate Authenticated Connections

Host [x] Address[/subnet]