beautypg.com

AirLive IP-2000VPN User Manual

Page 119

background image

IKE Authentication

algorithm

MD5

Must match with Client PC.

IKE Encryption

DES

Must match with Client PC.

IKE Exchange

mode

Main Mode

Windows 2000/XP only supports Main

Mode.

DH Group

Group 1 (768 bit)

Must match with Client PC.

IKE SA Life time

180

Shorter period will be used.

IKE Keep Alive

Skip the setting

IKE PFS

Disable

Must match with Client PC.

IPSec SA Parameters

IPSec SA Life time

300

Shorter period will be used.

IPSec PFS

Disable

Must match with Client PC.

AH Authentication

Disable

AH is rarely used.

ESP Authentication Enable

SHA-1

Must match with Client PC.

ESP Encryption

Enable

3DES

Must match with Client PC.

Step 3: Windows XP IPSec Client Configuration

1. Select Start - Settings – Control Panel- Administrative Tools - Local Security Policy.

2. Right

click

IP Security Policy on Local Machine

and select Create IP Security Policy.

AirLive IP-2000VPN User’s Manual

116