Chapter 10, Remote secure group, Remote secure gateway – Asus SL6000 User Manual

Page 94: Key management

Advertising
background image

ASUS VPN ADSL Router

93

Chapter 10

Chapter 10

IP Range

This option allows you to include a range of IP addresses for applying this rule.
The following fields become available for entry when this option is selected:
Start IP: Enter the starting IP address of the range.
End IP: Enter the ending IP address of the range.

Remote Secure Group

This option allows you to set the remote (destination) secure network to
which this rule should apply. This option allows you to apply this rule
inclusively on all computers in the external network. Use the “Type” drop-
down list to select one of the following:
IP Address, Subnet IP, Range: Select any of these and enter details as
described in the Local Secure Group above.

Remote Secure Gateway

Enter the appropriate IP address for the remote secure gateway.

Key Management

Two modes are supported: preshared key and manual key.
Preshared Key
Select Preshared Key from the Key Management drop-down list.
IKE Proposal Settings

Preshared Key

Enter the shared secret (this should match the secret key at the other end).

Encryption / Authentication

Select the IKE authentication and encryption from the drop-down list.

• All
• 3DES & SHA1-DH2
• 3DES & MD5-DH2
• DES & SHA1-DH2
• DES & MD5-DH2
• 3DES & SHA1-DH1
• DES & MD5-DH1

Note: It is recommended that you choose All to have all the IKE
proposals associated with the current tunnel and allow IKE to au-
tomatically select one (among the set of IKE proposals) to commu-
nicate with its peer. However, if a specific proposal is required, then
it can be chosen from the list.

• DES & SHA1-• DH1
• DES & MD5-DH1
• 3DES & SHA1-DH5
• 3DES & MD5-DH5
• DES & SHA1-DH5
• DES & MD5-DH5

Advertising
This manual is related to the following products: