IPsec Settings
Item Description
Encapsulation Type Specify the encapsulation type from the following:
• [Transport]: Select this mode to secure only the payload section of
each IP packet when communicating with IPsec compliant devices.
• [Tunnel]: Select this mode to secure every section of each IP packet.
We recommend this type for communication between security
gateways (such as VPN devices).
Security Protocol Select the security protocol from the following:
• [AH]: Establishes secure communication that supports authentication
only.
• [ESP]: Establishes secure communication that supports both
authentication and data encryption.
• [ESP&AH]: Establishes secure communication that supports both data
encryption and authentication of packets, including packet headers.
Note that you cannot specify this protocol when [Tunnel] is selected
for [Encapsulation Type].
Authentication
Algorithm for AH
Specify the authentication algorithm to be applied when [AH] or [ESP&AH]
is selected for [Security Protocol] from the following:
[MD5], [SHA1]
Encryption Algorithm
for ESP
Specify the encryption algorithm to be applied when [ESP] or [ESP&AH] is
selected for [Security Protocol] from the following:
[None], [DES], [3DES], [AES-128], [AES-192], [AES-256]
Authentication
Algorithm for ESP
Specify the authentication algorithm to be applied when [ESP] is selected
for [Security Protocol] from the following:
[MD5], [SHA1]
Life Time Specify the life time of the IPsec SA (Security Association) as a time period
or data volume. The SA will expire when the time period you specify
elapses or the volume of data you specify reaches the volume carried.
If you specify both a time period and a data volume, the SA will expire as
soon as either is reached, and a new SA will then be obtained by
negotiation.
To specify the life time of the SA as a time period, enter a number of
seconds.
To specify the life time of the SA as a data volume, enter a number of KBs.
Configuring the IPsec Settings
309
To Next Page
Loading...
Need help?
General
