Vpn Ipsec: New Ike Policy - Alcatel-Lucent OmniAccess 700 User Manual

Left running head:
Chapter name (automatic)
Configure
Step 2: Enter the interval in seconds for which the keep-alive messages will be
sent in the Time Interval field.
Step 3: Enter the time out in seconds after which the peer will be declared to be
dead in the Time out for Peer to be declared dead field.
Step 4: Click Apply to save the DPD values or click Cancel to cancel the
operation.
C N
REATING
By default, an IKE policy 'default' is created in your system, and cannot be edited
or deleted.
Follow the procedure below to create a new IKE Policy.
Step 1: Click New in the IKE Policy page to create a new IKE policy.
New IKE Policy page is displayed.
Figure 128: VPN IPsec: New IKE Policy
Step 2: Enter the name for IKE policy in Name field.
IKE policy name can be any alphanumeric name not exceeding 128 characters.
Step 3: Select the encryption algorithm in the Proposal field.
The default algorithm is sha1-aes128. Maximum of four proposals can be
associated with an IKE policy. The system prompts if more than four encryption
algorithms are selected.
Step 4: Select the predefined Perfect Forward Secrecy (PFS) group in PFS drop-
down list.
Default PFS group is group2 (1024 bit).
Step 5: Set lifetime for the IKE policy in Lifetime in Seconds field in the range of
540 - 86400 seconds. The default lifetime for IKE is 86400 seconds.
204
Beta
IKE P
EW OLICY
Alcatel-Lucent
Web GUI Users Guide
Beta