Linksys RV082 Manuel d'utilisateur télécharger pdf (Page 58)

Chapter 6: Set Up and Configure the Router

VPN Tab - Client to Gateway

10/100 8-Port VPN Router

Domain Name (FQDN) (Fully Qualified Domain Name): If you select FQDN, enter the FQDN of the Remote Client.

When the Remote Client requests to create a tunnel with the RV082, the RV082 will work as a responder. The

Domain Name must match the local settings of the Remote Client.

E-mail Address (User FQDN): Enter the E-mail address of User FQDN.

IPSec Setup

In order for any encryption to occur, the two ends of the tunnel must agree on the type of encryption and the way

the data will be decrypted. This is done by sharing a “key” to the encryption code. There are two Keying Modes of

key management, Manual and IKE with Preshared Key (automatic). If GroupVPN is enabled, the key management

will be IKE with Preshared Key only.

Manual

If you select Manual, you generate the key yourself, and no key negotiation is needed. Basically, manual key

management is used in small static environments or for troubleshooting purposes. Both sides must use the same

Key Management method.

Incoming & Outgoing SPI (Security Parameter Index): SPI is carried in the ESP (Encapsulating Security Payload

Protocol) header and enables the receiver and sender to select the SA, under which a packet should be

processed. The hexadecimal values is acceptable, and the valid range is 100~ffffffff. Each tunnel must have a

unique Inbound SPI and Outbound SPI. No two tunnels share the same SPI. The Incoming SPI here must match

the Outgoing SPI value at the other end of the tunnel, and vice versa

Encryption: There are two methods of encryption, DES and 3DES. The Encryption method determines the length

of the key used to encrypt/decrypt ESP packets. DES is 56-bit encryption and 3DES is 168-bit encryption. 3DES is

recommended because it is more secure, and both sides must use the same Encryption method.

Authentication: There are two methods of authentication, MD5 and SHA. The Authentication method determines a

method to authenticate the ESP packets. MD5 is a one-way hashing algorithm that produces a 128-bit digest.

SHA is a one-way hashing algorithm that produces a 160-bit digest. SHA is recommended because it is more

secure, and both sides must use the same Authentication method.

Encryption Key: This field specifies a key used to encrypt and decrypt IP traffic, and the Encryption Key is

generated yourself. The hexadecimal value is acceptable in this field. Both sides must use the same Encryption

Key. If DES is selected, the Encryption Key is 16-bit. If users do not fill up to 16-bit, this field will be filled up to

16-bit automatically by 0. If 3DES is selected, the Encryption Key is 48-bit. If users do not fill up to 48-bit, this

field will be filled up to 48-bit automatically by 0.

1 2 ... 53 54 55 56 57 58 59 60 61 62 63 ... 102 103

Pas de commentaire

Linksys RV082 Manuel d'utilisateur Page 58