Version 6.6 139 Mediant 2000
User's Manual 12. Security
12.3.2 Configuring IP Security Proposal Table
The IP Security Proposal Table page is used to configure Internet Key Exchange (IKE) with
up to four proposal settings. Each proposal defines an encryption algorithm, an
authentication algorithm, and a Diffie-Hellman group identifier. The same set of proposals
applies to both Main mode and Quick mode.
Note: You can also configure the IP Security Proposals table using the table ini file
parameter IPsecProposalTable (see 'Security Parameters' on page 528).
 To configure IP Security Proposals:
1. Open the IP Security Proposal Table page (Configuration tab > VoIP menu >
Security submenu > IPSec Proposal Table).
2. Click the Add button; the following dialog box appears:
Figure 12-3: IP Security Proposals Table - Add Record Dialog Box
3. Configure the parameters, as required. For a description of the parameters, see the
table below.
4. Click Submit.
5. To save the changes to flash memory, see 'Saving Configuration' on page 396.
IP Security Proposals Table Configuration Parameters
Parameter Name Description
Encryption Algorithm
[IPsecProposalTable_Enc
ryptionAlgorithm]
Defines the encryption (privacy) algorithm.
ï‚§ [0] NONE
ï‚§ [1] DES CBC
ï‚§ [2] 3DES CBC
ï‚§ [3] AES (default)
Authentication Algorithm
[IPsecProposalTable_Aut
henticationAlgorithm]
Defines the message authentication (integrity) algorithm.
ï‚§ [0] NONE
ï‚§ [2] HMAC SHA1 96
ï‚§ [4] HMAC MD5 96 (default)
Diffie Hellman Group
[IPsecProposalTable_DH
Group]
Defines the length of the key created by the DH protocol for up to four
proposals. For the ini file parameter, X denotes the proposal number
(0 to 3).
ï‚§ [0] Group 1 (768 Bits) = DH-786-Bit
ï‚§ [1] Group 2 (1024 Bits) (default) = DH-1024-Bit