2. Double-click [Local Security Policy].
If the "User Account Control" dialog box appears, click [Yes].
3. Click [IP Security Policies on Local Computer].
4. In the "Action" menu, click [Create IP Security Policy].
The IP Security Policy Wizard appears.
5. Click [Next].
6. Enter a security policy name in "Name", and then click [Next].
7. Clear the "Activate the default response rule" check box, and then click [Next].
8. Select "Edit properties", and then click [Finish].
9. In the "General" tab, click [Settings].
If you are using Windows XP, in the [General] tab, click [Advanced].
10. In "Authenticate and generate a new key after every", enter the same validity period (in
minutes) that is specified on the machine in "Encryption Key Auto Exchange Settings
Phase 1", and then click [Methods].
11. Confirm that the hash algorithm ("Integrity"), encryption algorithm ("Encryption") and
"Diffie-Hellman Group" settings in "Security method preference order" all match those
specified on the machine in "Encryption Key Auto Exchange Settings Phase 1".
If the settings are not displayed, click [Add].
12. Click [OK] twice.
13. Click [Add] in the "Rules" tab.
The Security Rule Wizard appears.
14. Click [Next].
15. Select "This rule does not specify a tunnel", and then click [Next].
16. Select the type of network for IPsec, and then click [Next].
17. Click [Add] in the IP Filter List.
18. In [Name], enter an IP Filter name, and then click [Add].
The IP Filter Wizard appears.
19. Click [Next].
20. If required, enter a description of the IP filter, and then click [Next].
21. Select "My IP Address" in "Source address", and then click [Next].
22. Select "A specific IP Address or Subnet" in "Destination address", enter the machine's IP
address, and then click [Next].
23. Select the protocol type for IPsec, and then click [Next].
If you are using IPsec with IPv6, select "58" as the protocol number for the "Other" target protocol
type.
Configuring IPsec
163
To Next Page
Loading...
Need help?
General
