Netgear FWAG114 FWAG114 Reference Manual - Page 77

Reference Manual for the ProSafe Dual Band Wireless VPN Firewall FWAG114 Table 7-1. IKE Policy Configuration Fields Field Description Remote These parameters apply to the target remote FWAG114, VPN gateway, or VPN client. Remote Identity Type Use this field to identify the remote FWAG114. You can choose one of the following four options from the drop-down list: • By its Internet (WAN) port IP address. • By its Fully Qualified Domain Name (FQDN) -- your domain name. • By a Fully Qualified User Name -- your name, E-mail address, or other ID. • By DER ASN.1 DN -- the binary DER encoding of your ASN.1 X.500 Distinguished Name. Remote Identity Data This field lets you identify the target remote FWAG114 by name. IKE SA Parameters These parameters determine the properties of the IKE Security Association. Encryption Algorithm Choose the encryption algorithm for this IKE policy: • DES is the default • 3DES is more secure Authentication Algorithm If you enable Authentication Header (AH), this menu lets you to select from these authentication algorithms: • MD5 - the default • SHA-1 - more secure Authentication Method You may select Pre-Shared Key or RSA Signature. Pre-Shared Key Specify the key according to the requirements of the Authentication Algorithm you selected. • For MD5, the key length should be 16 bytes. • For SHA-1, the key length should be 20 bytes. RSA Signature RSA Signature requires a certificate. Diffie-Hellman (D-H) Group The DH Group setting determines the bit size used in the key exchange. This must match the value used on the remote VPN gateway or client. SA Life Time The amount of time in seconds before the Security Association expires; over an hour (3600) is common. Virtual Private Networking 7-5