Certificate Upload; Security Association Settings - IBM TS3100 Setup, Operator, And Service Manual

Table 5-15. IKE settings (continued)
Name of setting
Host Authentication ID
|
|
|
|
|
|
|
Figure 5-53. Certificate Upload
|
|
|
|
Figure 5-54. Security Association settings
Table 5-16. Security Association settings
Name of setting
Enable AH
Enable ESP
5-62
TS3100 Tape Library and TS3200 Tape Library Setup, Operator, and Service Guide
Available Values
v All
v IPv6 Address
v FQDN
v E-Mail-Address

8. Certificate Upload

The file selection box appears under the IPsec page, and it is available even
before a new policy is created.

9. Security Association Settings

The Security Association settings define the parameter and algorithms for the
Security Association (SA) used in an IPSec session in case the associated
policy is used. In case IKE is not used these settings have to be exactly the
same as on the peer side. In case of IKE only the AH/ESP selection and the
algorithms are needed.
Available Values
checked/unchecked
checked/unchecked
Comments
ID value which is compared against
the peer ID.
v All
Any peer ID will be accepted.
v IPv6 Address
Peer IP address is compared.
v FQDN
Peers FQDN ID is compared.
v E-Mail Address
Peers E-Mail Address will be
compared.
Comments
AH (Authentication Header) mode
activation
ESP (Encapsulation Security Payload)
mode activation