3Com VCX v7111 User Manual page 330

Figure 123 Example of an SPD Table
[ IPSEC_SPD_TABLE ]
Format SPD_INDEX = IPSecPolicyRemoteIPAddress, IpsecPolicySrcPort,
IPSecPolicyDStPort,IPSecPolicyProtocol, IPSecPolicyLifeInSec,
IPSecPolicyProposalEncryption_0, IPSecPolicyProposalAuthentication_0,
IPSecPolicyProposalEncryption_1, IPSecPolicyProposalAuthentication_1,
IPSecPolicyKeyExchangeMethodIndex, IPSecPolicyLocalIPAddressType;
IPSEC_SPD_TABLE 0 = 10.11.2.21, 0, 0, 17, 900, 1,2, 2,2 ,1, 0;
[ \IPSEC_SPD_TABLE ]
In the SPD example, all packets designated to IP address 10.11.2.21 that originates from the
OAM interface (regardless to their destination and source ports) and whose protocol is UDP
are encrypted, the SPD also defines an SA lifetime of 900 seconds and two security
proposals: DES/SHA1 and 3DES/SHA1.
To configure the SPD table using the Embedded Web Server:
Access the Embedded Web Server (see
1
Open the IPSec Table screen (Advanced Configuration menu > Security Settings >
2
IPSec Table option); the IPSec Table screen is displayed.
330
Accessing the Embedded Web
®
3Com VCX V7111 VoIP Gateway User Guide
Server).