Page 126 SONICWALL VPNNote: Each Security Association must have unique SPIs; no two Security Associationscan share the same SPIs. However, each Security Association’s Incoming SPI may bethe same as the Outgoing SPI.7. Select Encrypt and Authenticate (ESP DES HMAC MD5) from the Encryp-tion Method menu.8. Enter a 16 character hexadecimal encryption key in the Encryption Key field oruse the default value. This encryption key is used to configure the remote Son-icWALL client's encryption key, therefore, write it down to use while configuringthe client.9. Enter a 32 character hexadecimal authentication key in the Authentication Keyfield or use the default value. Write down the key to use while configuring the clientsettings.Note: Valid hexadecimal characters include 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, a,b, c, d, e, andf. 1234567890abcdef is an example of a valid DES or ARCFour encryption key. If youenter an incorrect encryption key, an error message is displayed at the bottom of thebrowser window.10. Click Add New Network... to enter the destination network addresses. ClickingAdd New Network... automatically updates the VPN configuration and opens theVPN Destination Network window.11. Enter "0.0.0.0" in the Range Start, Range End, and Destination Subnet Maskfor NetBIOS broadcast fields.12. Click Advanced Settings.13. Check Enable Windows Networking (NetBIOS) broadcast if the remote siteis allowed access to network resources by browsing the Windows Network Neigh-borhood.14. Check Apply NAT and firewall rules if applicable.15. Check Forward Packets to Remote VPNs if configuring a “hub and spoke”net-work.16. Check Route all Internet Traffic through this SA if configuring a remote siteSecurity Association with access to the Internet via the VPN tunnel. If configuringa central site Security Association, this checkbox does not apply.17. Enter the Default LAN Gateway if Route all Internet traffic through this SAis checked for a remote site Security Association and you are configuring a corre-sponding central site Security Association.18. Click OK to close the Advanced Settings window.19. Click Update to add the remote network and close the VPN Destination Net-work window. Once the SonicWALL has been updated, a message confirming theupdate is displayed at the bottom of the browser window.