## - TimeStep Security Descriptors definition file - ## ## # Used for N+I Hot Stage ## begin security-descriptor Name "N+I" IPSec "ESP DES HMAC MD5 MINUTES 720 or ESP 3DES HMAC MD5 minutes 720 or ESP DES HMAC SHA minutes 720 or ESP 3DES HMAC SHA minutes 720" ISAKMP "IDENTITY DES MD5 or 3DES MD5" end ## # Use this descriptor for everyday secure communications. ## begin security-descriptor Name "Standard" IPSec "ESP DES MINUTES 720 or ESP DES HMAC MD5 MINUTES 720 or ESP 3DES HMAC MD5 MINUTES 720 or ESP CAST HMAC MD5 MINUTES 720 or ESP RC5 HMAC MD5 MINUTES 720 or ESP BLOWFISH HMAC MD5 MINUTES 720" ISAKMP "IDENTITY PFS 3DES MD5 MINUTES 1440 or DES MD5 MINUTES 1440" end ## # Use this descriptor for everyday secure communications on a # mobile client using shared secret authentication. ## begin security-descriptor Name "Mobile Client w/Shared Secret" IPSec "ESP DES MINUTES 300 or ESP DES HMAC MD5 MINUTES 300 or ESP 3DES HMAC MD5 MINUTES 300 or ESP CAST HMAC MD5 MINUTES 300 or ESP RC5 HMAC MD5 MINUTES 300 or ESP BLOWFISH HMAC MD5 MINUTES 300" ISAKMP "PFS DES MD5 MINUTES 1440" end ## # Use this descriptor for jurisdictions with export restriction. ## begin security-descriptor Name "Standard/Export" IPSec "ESP DES MINUTES 300 or ESP DES HMAC MD5 MINUTES 300 or ESP CAST HMAC MD5 MINUTES 300 or ESP CAST KEYLENGTH 56 HMAC MD5 MINUTES 300 or ESP RC5 HMAC MD5 MINUTES 300 or ESP RC5 KEYLENGTH 56 HMAC MD5 MINUTES 300 or ESP BLOWFISH HMAC MD5 MINUTES 300 or ESP BLOWFISH KEYLENGTH 56 HMAC MD5 MINUTES 300" ISAKMP "IDENTITY PFS DES MD5 MINUTES 1440" end ## # Use this descriptor to provide strong encryption. ## begin security-descriptor Name "High" IPSec "ESP 3DES MINUTES 360 or ESP 3DES HMAC MD5 MINUTES 360" ISAKMP "IDENTITY PFS 3DES MD5 MINUTES 1440 or DES MD5 MINUTES 1440" end ## # Use this descriptor to provide authentication without encryption # (key exchange does have encryption). ## begin security-descriptor Name "Authentication Only" IPSec "AH HMAC MD5 MINUTES 360 or ESP HMAC MD5 MINUTES 360" ISAKMP "IDENTITY PFS DES MD5 MINUTES 1440" end