TP-LINK TL-ER6120 User Manual download pdf (Page 97)

-92-

Phase1 is de-encrypted. Without PFS, the key in Phase2

is created based on the key in Phase1 and thus once the

key in Phase1 is de-encrypted, the key in Phase2 is easy

to be de-encrypted, in this case, the communication

secrecy is threatened.

SA Lifetime:

Specify IPsec SA Lifetime for IKE mode.

Status:

Activate or inactivate the entry.

z Manual Mode

IPsec Proposal:

Select the IPsec Proposal. Only one proposal can be

selected on Manual mode. You need to first create the

IPsec Proposal.

Incoming SPI:

Specify the Incoming SPI (Security Parameter Index)

manually. The Incoming SPI here must match the

Outgoing SPI value at the other end of the tunnel, and

vice versa.

AH Authentication

Key-In:

Specify the inbound AH Authentication Key manually if AH

protocol is used in the corresponding IPsec Proposal. The

inbound key here must match the outbound AH

authentication key at the other end of the tunnel, and vice

versa.

ESP Authentication

Key-In:

Specify the inbound ESP Authentication Key manually if

ESP protocol is used in the corresponding IPsec

Proposal. The inbound key here must match the outbound

ESP authentication key at the other end of the tunnel, and

vice versa.

ESP Encryption

Key-In:

Specify the inbound ESP Encryption Key manually if ESP

protocol is used in the corresponding IPsec Proposal. The

inbound key here must match the outbound ESP

encryption key at the other end of the tunnel, and vice

versa.

1 2 ... 92 93 94 95 96 97 98 99 100 101 102 ... 168 169

No comments

TP-LINK TL-ER6120 User Manual Page 97