User's Manual 190 Document #: LTRT-89730
Mediant 3000
2. Click Add; the following dialog box appears:
Figure 14-12: IP Security Associations Table - Add Row Dialog Box
3. Configure the parameters, as required (for a description of these parameters, see the
table below). In the above figure, a single IPSec/IKE peer (10.3.2.73) is configured.
Pre-shared key authentication is selected with the pre-shared key set to 123456789.
In addition, a lifetime of 28800 seconds is set for IKE and a lifetime of 3600 seconds is
set for IPSec.
4. Click Add.
5. To save the changes to flash memory, see ''Saving Configuration'' on page 672.
Table 14-9: IP Security Associations Table Configuration Parameters
Parameter Name Description
Operational Mode
[IPsecSATable_IPsecMod
e]
Defines the IPSec mode of operation.
 [0] Transport (default)

Tunnel
Remote Endpoint Addr
[IPsecSATable_RemoteE
ndpointAddressOrName]
Defines the IP address or DNS host name of the peer.
Note: The parameter is applicable only if the Operational Mode is set to
Transport.
Authentication Method
[IPsecSATable_Authentic
ationMethod]
Defines the method for peer authentication during IKE main mode.
 [0] Pre-shared Key (default)
 [1] RSA Signature = in X.509 certificate
Note: For RSA-based authentication, both peers must be provisioned
with certificates signed by a common CA. For more information on
certificates, see ''Replacing the Device's Certificate'' on page 127.
Shared Key
[IPsecSATable_SharedKe
Defines the pre-shared key (in textual format). Both peers must use the
same pre-shared key for the authentication process to succeed.
To Next Page
Loading...
Need help?
General
