Lindy 42829 - Manual (Page 19)

EN 19
3.2.3. IPSec Security Settings
In the “Security” tab you can configure a VPN with a client for secure access to the box. The box uses
IPSec for establishing a VPN.
By default the security will be disabled. Then we have the encryption and authentication settings. The
USB 2.0 DEVICE SERVER NAS will support 3DES, AES128, AES192 and AES256 encryption
techniques and MD5, SHA1 authentication techniques.
The “Key Management” allows setting the type of key management whether Auto IKE (Internet Key
Exchange) or “Manual”.
In the below figure the “Auto (IKE)” is selected. Under this you have an option for enable/disable PFS
(Perfect Forward Secrecy) which is useful for key exchange. The “Pre-shared Key” field is to specify
what key to use and the “Key Life Time” field is the amount to specify the key lifetime in seconds.
The below figure is the “Manual” configuration of Key Management. Here we have to specify the
“Encryption Key” as well as the “Authentication Key”. Apart from these we have a SPI (Security
Parameter Index) field with which the SA’s (Security Associations) will be identified.