108D-Link DIR-1210 User ManualSection 4 - ConfigurationThe First PhaseEncryptionAlgorithm:Choose either 3DES or DES encryption algorithm for first phaseHashingAlgorithm:Choose either MD5 SHA-1 hashing algorithm or for first phase fromdrop down list.DHgroup type: Specify DHgroup type for First Phase from drop down list.IKE-SA lifetime: Specify valid value between 60 seconds and 86400 seconds.The Second PhaseEncryptionAlgorithmSpecify from drop down list the encryption algorithm for SecondPhaseAuthenticationAlgorithm:Specify from drop down list the authentication algorithm for SecondPhaseEnable PFS: Toggle this switch to enable Perfect Forward Secrecy for secondphase.PFSgroup type: Specify from drop down list appropriate PFSgroup type for SecondPhase.IPsec-SA lifetime: Specify valid value in secondsTunneled NetworksAdd: Click to add rule to apply to IPsec tunnelDelete: Click to delete rule