Administrator Setting | [IKEv2 Settings]

[IKEv2 Settings]

Configure the IKEv2 settings necessary for generation of common keys used in IPsec communication.

Tips

Be sure to set at least one Diffie-Hellman Group.
Even if the priority order is different, the registered Diffie-Hellman Groups cannot be duplicated.

Setting item		Description
[Encryption Algorithm]	[DES-CBC]	Select the encryption algorithm used to generate the common key for IPsec communication. Key length^* is set when [AES-CBC] is selected. *: Value that indicates the size of data (encryption key) used in encryption and decoding
	[3DES-CBC]
	[AES-CBC]
[Authentication Algorithm]	[SHA-1]	Select the authentication algorithm^1 used to generate the common key for IPsec communication. Sets the hash value^2 when [SHA-2] is selected. 1: Hash function 2: Value generated from source data (return value of the hash function)
	[SHA-2]
	[AES-XCBC]
[Diffie-Hellman Group]	[Priority 1] to [Priority 4]	Set Diffie-Hellman Group used to generate the common key required for communication for each priority order. Diffie-Hellman: Method of handing over common key used in common key encryption method.
[Key Validity Period]		Set the expiration time of the common key used in IPsec communication. After the expiration time, a new key is automatically generated, thereby, enabling you to maintain security. Press Control panel - C to allow input. Range: 600 sec. to 604800 sec.

Set the hash value when [SHA-2] is selected.

Select [SHA-2].

The setting screen is displayed.

Select [ON] or [OFF].

Select the hash value when [ON] is selected.

Press [OK].

Select [Priority 1].

The setting screen is displayed.

Select Diffie-Hellman Group.

Press [OK].

To set multiple Diffie-Hellman Groups, select [Priority 2] or later.

The setting screen is displayed.

Select Diffie-Hellman Group.

Press [OK].