IPSec Settings IPSec Connection Name Tunnel Mode ESP AH Remote IPSec Gateway Address (IP or Domain) Tunnel access from local IP addresses Subnet Single Address IP Address for VPN Mask or Prefix Length Tunnel access from remote IP addresses Subnet Single Address IP Address for VPN Mask or Prefix Length Key Exchange Method Auto(IKE) Manual Authentication Method Pre-Shared Key Certificate (X.509) Pre-Shared Key Certificates Perfect Forward Secrecy Enable Disable Advanced IKE Settings Encryption Algorithm DES 3DES AES(aes-cbc) Encryption Key   Hex value: DES - 16 digit, 3DES - 48, AES 32, 48, 64 digit Authentication Algorithm MD5 SHA1 Authentication Key   Hex value: MD5 - 32 digit, SHA1 - 40 digit SPI   Hex value: 100-FFFFFFFF Phase 1 Mode Main Aggressive Encryption Algorithm DES 3DES AES - 128 AES - 192 AES - 256 Integrity Algorithm MD5 SHA1 Select Diffie-Hellman Group for Key Exchange 768bit 1024bit 1536bit 2048bit 3072bit 4096bit 6144bit 8192bit Key Life Time   Seconds Phase 2 Encryption Algorithm DES 3DES AES - 128 AES - 192 AES - 256 NULL Enryption Integrity Algorithm MD5 SHA1 Select Diffie-Hellman Group for Key Exchange 768bit 1024bit 1536bit 2048bit 3072bit 4096bit 6144bit 8192bit Key Life Time   Seconds