Configuring Virtual Private Networks (VPNs) and Security
Configuring Advanced VPN Parameters
Cisco RV180/RV180W Administration Guide
-
DES
-
3DES
-
AES-128
-
AES-192
-
AES-256
•
Authentication Algorithm—Specify the authentication algorithm for the
VPN header:
-
MD5
-
SHA-1
-
SHA2-256
-
SHA2-384
-
SHA2-512
Ensure that the authentication algorithm is configured identically on both
sides.
•
Authentication Method—Choose one of the following options:
-
Pre-Shared Key—Choose this option for a simple password-based key
that is shared with the IKE peer. Then enter the key in the space provided.
Note that the double-quote character (") is not supported in the pre-
shared key.
-
RSA-Signature—Choose this option to disable the pre-shared key text
field and use the Active Self Certificate that was uploaded on the
Security > SSL Certificate page. A certificate must be configured in
order for RSA-Signature to work.
•
Diffie-Hellman (DH) Group—Specify the DH Group algorithm, which is
used when exchanging keys. The DH Group sets the strength of the
algorithm in bits. Ensure that the DH Group is configured identically on both
sides of the IKE policy.
•
SA Lifetime—Enter the interval, in seconds, after which the Security
Association becomes invalid.
5
112