D-Link DIR-822 User Manual page 175

DIR-822 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh Router
User Manual
Figure 134. The page for adding an IPsec tunnel. The First Phase / The Second Phase sections.
Parameter
First phase
encryption algorithm
Encryption mode
Hashing algorithm
Size of hash
Hashing mode
First phase DHgroup
type
IKE-SA lifetime
Aggressive Mode
The First Phase
Select an available encryption algorithm from the drop-down list.
Select an encryption mode from the drop-down list.
Select a hashing algorithm from the drop-down list.
The length of the hash in bits.
Select a hashing mode from the drop-down list.
A Diffie-Hellman key group for the First Phase. Select a value from
the drop-down list.
The lifetime of IKE-SA keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should be greater than the value specified in the IPsec-SA lifetime
field.
Move the switch to the right to enable the aggressive mode for mutual
authentication of the parties. Such a setting accelerates the connection
establishment, but reduces its security.
Page 175 of 235
Configuring via Web-based Interface
Description