Johnson Controls P2000 - IPSEC Parameters; P2000 Server IP Address; VPN Router WAN IP Address

24-10618-155 Rev. A 2-1
Chapter
2
This document contains confidential and proprietary information of Johnson Controls, Inc.
© 2012 Johnson Controls, Inc.
CONFIGURATION
IPSEC PARAMETERS
An IPSec tunnel consists of a pair of unidirectional Security Associations (SAs)—one at
each end of the tunnel—that specify the security parameter index (SPI), destination IP
address, and security protocol (Authentication Header or Encapsulating Security Payload)
employed.
Table 2-1: IPSEC Parameters
Mode Tunnel
Protocol Encapsulating Security Payloa
d (ESP), Authentication
Protocol (AH)
Authentication SH1 Secure Hash Algorithm-1 (SHA-1)
ESP Encryption Triple DES (3DES) 168-bit Key
Key Management AutoKey IKE with a preshared key
Diffie-Hellman Exchange Group 2 1024-bit modulus
Perfect Forward Secrecy (PFS) Enabled
Phase 1 3DES
Main Mode (six message exchange)
Group 2:
Preshared Key
Phase 2 Quick Mode
ESP
PFS
P2000 Server IP Address
IP Address: 200.0.0.1 (static IP address)
Subnet Mask: 255.255.255.0
VPN Router WAN IP Address
IP Address: 201.0.0.2 (static IP address)
Subnet Mask: 255.255.255.0