IPSec

Enable IPSec

• Off*
• On

Enable Internet Protocol Security (IPSec).

Base Configuration

• Default*
• Compatibility
• Secure

Set the IPSec base configuration.

Note:  This menu item appears only when Enable IPSec is set to On.

DH (Diffie‑Hellman) Group Proposal

• modp2048 (14)*
• modp3072 (15)
• modp4096 (16)
• modp6144 (17)

Set the IPSec base configuration.

Note:  This menu item appears only when Base Configuration is set to Compatibility.

Proposed Encryption Method

• 3DES
• AES*

Set the encryption method.

Note:  This menu item appears only when Base Configuration is set to Compatibility.

Proposed Authentication Method

• SHA1
• SHA256*
• SHA512

Set the authentication method.

Note:  This menu item appears only when Base Configuration is set to Compatibility.

IKE SA Lifetime (Hours)

• 1
• 2
• 4
• 8
• 24*

Specify the IKE SA expiry period.

Note:  This menu item appears only when Base Configuration is set to Secure.

IPSec SA Lifetime (Hours)

• 1
• 2
• 4
• 8*
• 24

Specify the IPSec SA expiry period.

Note:  This menu item appears only when Base Configuration is set to Secure.

IPSec Device Certificate

Specify an IPSec certificate.

Note:  This menu item appears only when Enable IPSec is set to On.

Pre‑Shared Key Authenticated Connections

• Host [x]

Certificate Authenticated Connections

• Host [x] Address[/subnet]