Westermo MRD-3x0 - Manual (Page 132)

132 6623-3201
Once entered click the Next button to continue to Phase 1
configuration.
Phase 1 Configuration
The Phase 1 Configuration page is shown in Figure 96. In this
phase the authentication method is set to pre-shared keys and
the key entered. The remote ID is xy.example.com and local
ID is ab.example.com. As the wireless IP address is dynamic
and private the network provider will use Network Address
Translation (NAT) so main mode cannot be used for the
negotiation mode requiring the negotiating mode to be set
to aggressive mode. The IKE proposal will use Triple DES as
the encryption algorithm, SH1 for authentication and Diffie-
Hellman group 3. The IKE lifetime will be left at the default
value of 60 minutes.
Figure 96: IPsec phase 1 configuration.