Manual

IKE Authentication
algorithm
MD5 Must match with Client PC.
IKE Encryption
DES Must match with Client PC.
IKE Exchange
mode
Main Mode Windows 2000/XP only supports Main
Mode.
DH Group
Group 1 (768 bit) Must match with Client PC.
IKE SA Life time
180 Shorter period will be used.
IKE Keep Alive
Skip the setting
IKE PFS
Disable Must match with Client PC.
IPSec SA Parameters
IPSec SA Life time
300 Shorter period will be used.
IPSec PFS
Disable Must match with Client PC.
AH Authentication
Disable AH is rarely used.
ESP Authentication
Enable SHA-1 Must match with Client PC.
ESP Encryption
Enable 3DES Must match with Client PC.
Step 3: Windows XP IPSec Client Configuration
1. Select Start - Settings – Control Panel- Administrative Tools - Local Security Policy.
2. Right click IP Security Policy on Local Machine and select Create IP Security Policy.
AirLive IP-2000VPN User’s Manual
116