176
SONICWALL SONICOS ENHANCED 2.5 ADMINISTRATOR’S GUIDE
C
HAPTER
29:
Configuring VPN Policies
7
Click on the Proposals tab.
8
Define an Incoming SPI and an Outgoing SPI. The SPIs are hexadecimal (0123456789abcedf)
and can range from 3 to 8 characters in length.
S
Alert: Each Security Association must have unique SPIs; no two Security Associations can share the
same SPIs. However, each Security Association Incoming SPI can be the same as the Outgoing SPI.
9
The default values for Protocol, Phase 2 Encryption, and Phase 2 Authentication are
acceptable for most VPN SA configurations.
Note: The values for Protocol, Phase 2 Encryption, and Phase 2 Authentication must match the
values on the remote SonicWALL.
10
Enter a 16 character hexadecimal encryption key in the Encryption Key field or use the default
value. This encryption key is used to configure the remote SonicWALL encryption key, therefore,
write it down to use when configuring the SonicWALL.
11
Enter a 32 character hexadecimal authentication key in the Authentication Key field or use the
default value. Write down the key to use while configuring the SonicWALL settings.
9
Tip: Valid hexadecimal characters include 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, a,b, c, d, e, and f.
1234567890abcdef is an example of a valid DES or ARCFour encryption key. If you enter an incorrect
encryption key, an error message is displayed at the bottom of the browser window.