Features

This Software implements the IPSEC Protocol standard and uses ISAKMP version 1.0 to negotiate security parameters with a VPN Gateway. In addition, it includes support for the XAuth protocol extension for user authentication and the Configuration Exchange extension for automatic client configuration. Please read below for a complete list of supported features.

Firewall Traversal Options

• NAT Traversal
• NAT Keep Alive
• IKE Fragmentation

Authentications Methods

• Hybrid RSA + XAuth
• Mutual RSA + XAuth *
• Mutual PSK + XAuth *
• Mutual RSA
• Mutual PSK

Identification Types

• ASN1DN
• FQDN
• UFQDN
• Address
• Key Identifier

Exchange Modes

• Main
• Aggressive
• Configuration ( push or pull )
• Quick
• Informational

Phase1 Ciphers

• AES
• Blowfish
• 3DES
• CAST
• DES

Phase1 Hash Algorithms

• MD5
• SHA1

Phase2 Transforms

• ESP-AES
• ESP-Blowfish
• ESP-3DES
• ESP-CAST
• ESP-DES

Phase2 HMAC Algorithms

• HMAC-MD5
• HMAC-SHA1

Phase2 Options

• PFS is supported
• Tunnel mode is supported
• Transport mode is not supported
• Compression is not supported

Basic Configuration Exchange Attributes

• Banner
• Address
• Netmask
• WINS Server
• DNS Server
• DNS Default Domain

Advanced Configuration Exchange Attributes

• Split Network Include List *
• Split Network Exclude List *
• Split DNS Domain List *
• PFS DH Group *

* requires ipsec-tools 0.7 or later

Copyright © 2007, Shrew Soft Inc