HotBrick Dual WAN Firewall VPN 1400/2 User Manual

Page 47

HotBrick, Tel: 305-398-0888, Fax: 305-398-5966

 Tunnel Name– In order to distinguish the tunnel, you have to give the “Tunnel” a unique name.

 PPPoE Session– If you are using PPPoE to make the connection, and your ISP offers multiple PPPoE

sessions, you can select these PPPoE sessions to construct VPN tunnels.

 Enable setting – The tunnel can only be connected if enabled.

 Phase 1 DH Group – Use DH Group 1(768-bits), DH Group 2(1024-bits), or Group 5 (1536-bits) to

generate IPSec SA keys.

 Phase 1 Encryption Method– Three data encryption methods are available: DES, 3DES, AES.

 Phase 1 Authentication Method– There are two authentication methods available: MD5 and SHA1

(Secure Hash Algorithm).

 Phase 1 SA Life Time– By default the Security Association lifetime is 3600 Sec.

 Force Deletion after Expiring – Once SA expires, tunnel will be removed and related resources

will be released to the system.

Security level

 Encryption Method – specifies the encryption mechanism to use. Data encryption makes the data

unreadable if intercepted. There are three encryption method available; DES, 3DES and AES. The
default is null.

 Authentication – specifies the packet authentication mechanism to use. Packets authentication

proves the data comes from the source you think it comes from. There are three authentications available:

MD5, SHA1 and SHA2.