wasrouter1.hou.westparkcom.net - VPN: IPsec: Edit = tunnel

webConfigurator

wasrouter1.hou.westparkcom.net =

System
- Advanced
- Firmware
- General Setup=20
- Packages=20
- Setup = wizard=20
- Static=20 routes
Interfaces
- (assign) =
- WAN=20
- LAN=20
- WAN2 =
- SYNC=20
Firewall
- Aliases
- NAT=20
- Rules=20
- Schedules =
- Traffic=20 Shaper
- Virtual = IPs=20
Services
- Captive = portal=20
- DNS=20 forwarder
- DHCP=20 relay
- DHCP=20 server
- Dynamic=20 DNS
- Load=20 Balancer
- OLS= R=20
- RIP=20
- SNMP=20
- UPnP=20
- = OpenNTPD=20
- Wake on=20 LAN
VPN
- IPsec=20
- OpenVPN =
- PPPoE=20
- PPTP=20
Status
- CARP=20 (failover)
- DHCP=20 leases
- Filter Reload = Status
- Interfaces =
- IPsec=20
- Load=20 Balancer
- Package=20 logs
- Queues=20
- RRD=20 Graphs
- Services
- System
- System=20 logs
- Traffic = graph
- UPnP=20
Diagnostics
- ARP = Tables=20
- Backup/Restore =
- Command = Prompt=20
- Edit = File
- Factory=20 defaults
- Halt = system=20
- Ping
- Reboot system=20
- Routes=20
- States
- Traceroute =
- Packet = Capture=20

VPN: IPsec: Edit tunnel

Mode

Tunnel

Disabled

Disable this tunnel
Set this option to disable this tunnel without = removing it=20 from the list.

Interface

Select the interface for the local endpoint of this=20 tunnel.

Local subnet

Type:
Address:		/ = = 31 = 29 = 27 = 25 = 23 = 21 = 19 = 17 = 15 = 13 = 11 = 9 7 5 3 1 =20

Remote subnet

Remote gateway

Enter the public IP = address of the=20 remote gateway

Description

You may = enter a=20 description here for your reference (not parsed).

Phase 1 proposal=20 (Authentication)

Negotiation = mode

Aggressive is faster, but less = secure.

My identifier

Encryption = algorithm

Must match the setting chosen on the remote side.=20

Hash algorithm

=20
Must match the setting chosen on the = remote side.=20

DH key group

1 =3D = 768 bit, 2 =3D=20 1024 bit, 5 =3D 1536 bit
Must match the setting chosen on = the remote=20 side.

Lifetime

seconds

Authentication = method

Must=20 match the setting chosen on the remote side.

Pre-Shared Key

Certificate

=20
Paste a certificate in X.509 PEM format here.

Key

=20
Paste an RSA private key in PEM format here.

Peer certificate

=20
Paste the peer X.509 certificate in PEM format here.
Leave = this=20 blank if you want to use a CA certificate for identity = validation.

Phase 2 proposal = (SA/Key=20 Exchange)

Protocol

=20
ESP is encryption, AH is authentication = only=20

Encryption = algorithms

DES
3DES
Blowfish
CAST128
Rijndael (AES)
Rijndael 256 =

Hint: use 3DES=20 for best compatibility or if you have a hardware crypto = accelerator card.=20 Blowfish is usually the fastest in software encryption.

Hash = algorithms

SHA1
MD5

PFS key group

=
1 =3D 768 bit, 2 =3D 1024 bit, 5 =3D 1536 = bit

Lifetime

seconds

Keep alive

Automatically ping = host

IP address

=20 =

=0A= =0A=

pfSense is =A9 2004-2007 by Scott Ullrich. All = Rights Reserved.=20 [view = license]