Installing The Access Ports And Testing - Motorola WS2000 - Wireless Switch - Network Management Device System Reference Manual

12-60 WS2000 Wireless Switch System Reference Guide
The AH Authentication protocol
the VPN tunnel. The AH authentication method must match on both switches and the inbound key on one
WS 2000 must match the outbound key on the other. Leo selects
method and enters inbound and outbound 40 character authentication keys.
The inbound Security Parameter Index (SPI)
other switch and vice versa. Leo enters 100 for the Inbound SPI and 101 for the Outbound SPI.
The Encapsulating Security Payload
network packets will be encrypted between the two ends of the VPN tunnel. Leo chooses
and specifies the
the other WS 2000. He also specifies the
match the Inbound ESP Encryption Key on the other switch.
Finally, the Inbound
Outbound and Inbound SPIs on the other WS 2000. Leo enters 110 for the Inbound SPI and 111 for the
Outbound SPI.
Leo clicks Ok to record the Manual Key Settings. Then he clicks the
configuration.
The switch is now configured!

12.28 Installing the Access Ports and Testing

The switch is now configured. Leo connects the switch's WAN port to the VPN appliance that goes to the
outside world. He gets three laptops and sets each of them to use DHCP for IP address assignment, 802.1x
EAP for user authentication, and WPA-TKIP for data encryption over the wireless link. He uses the first laptop
to connect to the engineering WLAN, the second to connect to the sales and marketing WLAN, and the third
is used between the two WS 2000 switches to authorize initialization of
or ESP
Inbound ESP Encryption Key
Outbound ESP Encryption Key
and Outbound SPI fields in the encryption section on this WS 2000 must match the
Secure Hash Algorithm 1
for this WS 2000 must match the outbound SPI from the
is specified in the lower section. This specifies how the
so that it will match the Outbound ESP Encryption Key on
Apply
or SHA1 as the
DES encryption
on this WS 2000 so that it will
button to confirm this