This section lists all of the functions and properties of LANCOM VPN. Experts in the VPN sector are offered a highly compressed summary of the performance of the function. Understanding the terminology requires a sound knowledge of the technical fundamentals of VPN. However, for commissioning and normal operation of the LANCOM VPN, this information is not required.
- VPN according to IPSec standard
- VPN tunnel via leased lines, switched connections and IP networks
- IKE Main and Aggressive mode
- LANCOM Dynamic VPN: Public IP addresses can be static or dynamic (establishing a connection with remote sites using dynamic IP addresses requires ISDN)
- IPSec protocols ESP, AH and IPCOMP in transport and Tunnel mode
- Hash algorithms:
- HMAC-MD5-96, hash length 128 bits
- HMAC-SHA-1-96, hash length 160 bits
- HMAC-SHA-2-256, hash length 256 bits
- Symmetrical encryption methods
- AES, key lengths of 128, 192 and 256 bits
- Triple DES, Key length 168 bits
- Blowfish, key length 128 - 448 bits
- CAST, key length 128 bits
- DES, key length 56 bits
- Compression with "Deflate“ (ZLIB) and LZS
- IKE config mode
- IKE with preshared keys
- IKE with RSA signature and digital certificates (X.509)
- Key exchange via Oakley, Diffie-Hellman algorithm with a key length of 768 bits, 1024 bits, 1536 bits and 2048 bits (well known groups 1, 2, 5 und 14)
- Key management according to ISAKMP