NETGEAR ProSafe FVG318 Reference Manual page 130

Reference Manual for the ProSafe Wireless 802.11g VPN Firewall Model FVG318
Table 7-1. VPN Manual Policy Configuration Fields
Field
SPI - Outgoing
Enable Authentication
Authentication Algorithm
Key - In
Key - Out
Encapsulated Security Payload
(ESP) Configuration
SPI - Incoming
SPI - Outgoing
Enable Encryption
7-12
Description
Enter a hexadecimal value (3 - 8 chars). Any value is acceptable, provided
the remote VPN endpoint has the same value in its Incoming SPI field.
Use this check box to enable or disable AH. Authentication is often not
used. In this case, leave the check box unchecked.
If you enable AH, then select the authentication algorithm:
• MD5 — the default
• SHA1 — more secure
Enter the keys in the fields provided. For MD5, the keys should be 16
characters. For SHA-1, the keys should be 20 characters.
Enter the keys.
• For MD5, the keys should be 16 characters.
• For SHA-1, the keys should be 20 characters.
Any value is acceptable, provided the remote VPN endpoint has the same
value in its Authentication Algorithm Key - Out field.
Enter the keys in the fields provided.
• For MD5, the keys should be 16 characters.
• For SHA-1, the keys should be 20 characters.
Any value is acceptable, provided the remote VPN endpoint has the same
value in its Authentication Algorithm Key - In field.
ESP provides security for the payload (data) sent through the VPN tunnel.
Generally, you will want to enable both encryption and authentication.
when you use ESP. Two ESP modes are available:
• Plain ESP encryption
• ESP encryption with authentication
These settings must match the remote VPN endpoint.
Enter a hexadecimal value (3 - 8 chars). Any value is acceptable, provided
the remote VPN endpoint has the same value in its Outgoing SPI field.
Enter a hexadecimal value (3 - 8 chars). Any value is acceptable, provided
the remote VPN endpoint has the same value in its Incoming SPI field.
Use this check box to enable or disable ESP Encryption.
v1.0, October 2005
Advanced Virtual Private Networking