Netopia Firmware 4000-Series - Manual (Page 135)

Internet Key Exchange (IKE) IPsec Key Management for VPNs 5-5
■ The Profile Name field accepts any name of up to 16 characters. Sixteen IKE Phase 1 profiles are
suppor ted, since each of the potential sixteen Connection Profiles may be associated with a separate IKE
Phase 1 profile.
■ The Mode pop-up menu allows you to choose between Main Mode (the default) and Aggressive Mode.
■ In Main Mode the router hides the Local and Remote Identity Type and Value fields, defaults to the host
address, and always uses the IPV4 Address and the local and remote tunnel endpoint address.
■ In Aggressive Mode the Local and Remote Identity Type pop-up menus allow you to choose the type of
Identity value to use: IPv4 Address, IPv4 Subnet, IPv4 Range, Host Name, E-Mail Address, Key ID (ASCII),
and Key ID (HEX). The Local and Remote Identity Type and Value menus allow you to specify one of the
following, based on what Local Identity Type you selected in the previous pop-up menu:
IPv4 Address: A single IPv4 address in the familiar dotted-quad notation (a.b.c.d).
IPv4 Subnet: A single IPv4 network address in dotted-quad notation (a.b.c.d) followed by a mask specified
either by a slash and a bit-count between 0 and 32 OR by a second dotted-quad.
IPv4 Range: Two IPv4 addresses in dotted quad notation (a.b.c.d) separated by a space.
Host Name: A fully-qualified domain name (FQDN).
E-Mail Address: An RFC 822 e-mail address in the form user@hostname.
Key ID (ASCII): An opaque string consisting of printable ASCII characters represented as a sequence of
printable ASCII characters.
Key ID (HEX): An opaque string consisting of arbitrar y 8-bit ASCII values represented as a sequence of
hexadecimal digits, each of which corresponds to one nibble of the string value.
■ The Authentication Method pop-up menu specifies the IKE Phase 1 authentication method. The only
currently suppor ted authentication method is Shared Secret. Other methods may be suppor ted in future
firmware releases.
■ The Shared Secret field allows you to enter a shared secret phrase (between 1 and 48 characters long)
Add IKE Phase 1 Profile
Profile Name: IKE Profile 1
Mode... Aggressive Mode
Local Identity Type... IPv4 Address
Local Identity Value: 0.0.0.0
Remote Identity Type... IPv4 Address
Remote Identity Value: 0.0.0.0
Authentication Method... Shared Secret
Shared Secret: ********************
Encryption Algorithm... des
Hash Algorithm... md5
Diffie-Hellman Group... Group 2 (1024 bits)
Advanced IKE Phase 1 Options...
ADD IKE PHASE 1 PROFILE CANCEL