170 | Aruba Configuration Reference AirWave Wireless Management Suite | Configuration Guide
Click Add to create a new IPSEC profile, or click the pencil icon next to an existing profile to modify
settings. The
Add/Edit Details page contains the following fields, as described in Table 80:
Click
Add to complete the creation of the IPSEC profile, or click Save to retain the changes to the IPSEC
profile. This profile appears on the
Advanced Services > VPN Services > IPSEC page.
Advanced Services > VPN Services > IPSEC > Dynamic Map
VPN Services may reference IPSEC profiles. IPSEC profiles reference Dynamic Maps, and Dynamic Maps
reference Transform Sets. This interrelationship is conveyed in the navigation pane of
Device Setup > Aruba
Configuration
.
Dynamic maps establish policy templates that are used during negotiation requests in IPSEC. This occurs
during security associations from a remote IPSEC peer in the VPN, even when all cryptographic map
parameters are not known during new security associations from a remote IPSEC peer. For instance, if you
do not know about all the IPSec remote peers in your network, a Dynamic Map allows you to accept
requests for new security associations from previously unknown peers. Note that these requests are not
processed until the IKE authentication has completed successfully. In short, a Dynamic Map is a policy
template used by IPSEC profiles. Dynamic Maps are not used for initiating IPSEC security associations, but
for determining whether or not traffic should be protected in the VPN.
To view Dynamic Maps that are currently configured, navigate to
Advanced Services > VPN Services >
IPSEC > Dynamic Map
. This page lists dynamic map names, IPSEC profiles that reference them, and the
folder.
Click
Add to create a new Dynamic Map, or click the pencil icon next to an existing map to modify settings.
The
Add/Edit Details page contains the fields as described in Table 81:
Table 80 Advanced Services > VPN Services > IPSEC Add/Edit Field Descriptions
Field Default Description
General Settings
Folder Top Use this field to set and display the folder with which the IPSEC
profile is associated. The drop-down menu displays all folders
available for association with the IPSEC profile.
Name Blank Enter the name of the IPSEC profile.
Other Settings
Maximum MTU Size
(1034-1500 bytes)
1500 Define the Maximum transmission unit (MTU) size in bytes.
Dynamic Maps
Dynamic Maps N/A Select one or more dynamic maps that the IPSEC profile is to
reference. You can add or edit dynamic maps as required. For
additional information, refer to “Advanced Services > VPN
Services > IPSEC > Dynamic Map” on page170.
Table 81 Advanced Services > VPN Services > IPSEC > Dynamic Map Add/Edit Field Descriptions
Field Default Description
General Settings
Folder Top Use this field to set and display the folder with which the Dynamic
Map is associated. The drop-down menu displays all folders
available for association with the Dynamic Map.
To Next Page
Loading...
