User Guide

TL-WR842ND 300Mbps Multi-Function Wireless N Router
- 53 -
¾ Out Authentication Key - It is for direction out authentication key set in manual mode, and
the key must be same as peer In Authentication Key.
¾ PFS Group - Select the PFS property from the drop-down list that should be the same for the
local and remote endpoints. If you select "None" for local endpoint, any value is accepted for
remote endpoint.
¾ Lifetime - Manually enter the number of seconds for the IPsec Lifetime. The default value is
28800.
¾ Enable - Enable or Disable current policy.
To modify or delete an existing entry:
3. Find the desired entry in the table.
4. Click modify or delete as desired on the Configuration column.
Click the Delete All button to delete all entries.
4.8.3 Security Alliance List
Choose “VPN→Security Alliance List”, you can view the information of the IPsec SA (Security
Alliance) in this table (shown in Figure 4-36).
Figure 4-36 List of Security Alliance
¾ Name - Here displays the name or description of the IPsec policy.
¾ SPI - Here displays the SPI (Security Parameter Index) of each specific IPsec policy.
¾ Tunnel Initiator - Tunnel initiator gateway.
¾ Tunnel Receiver - Tunnel receiver gateway.
¾ Security Protocol - Here displays the Security Protocol of the IPsec policy.
¾ AH Auth - Here displays the AH Authentication Algorithm of the IPsec policy.
¾ ESP Auth - Here displays the ESP Authentication Algorithm of the IPsec policy.
¾ ESP Encr - Here displays the ESP Encryption Algorithm of the IPsec policy.
Figure 4-36 displays the connection status of the NO.1 entry in the List of IPsec policy in Figure
4-35. As shown in the figure, the IP address of WAN and the default gateway of remote peer are