Ssl/Tls - 3Com VCX v7111 User Manual

cannot be read. In the ini file, the following measures to assure the secrecy of the IPSec and
IKE tables are taken:
Hidden IPSec and IKE tables
IKE tables are not available. Instead, the notifications are displayed.
Figure 125 Example of an ini File Notification of Missing Tables
;
; *** TABLE IPSEC_IKEDB_TABLE ***
; This table contains hidden elements and will not be exposed.
; This table exists on board and will be saved during restarts
;
;
; *** TABLE IPSEC_SPD_TABLE ***
; This table contains hidden elements and will not be exposed.
; This table exists on board and will be saved during restarts
;
Preserving the values of the parameters in the IPSec and IKE tables from one ini file
loading to the next – The values configured for the parameters in the IPSec tables in the
ini file are preserved from one loading to another. If a newly loaded ini file does not
define IPSec tables, the previously loaded tables remain valid. To invalidate a previously
loaded ini file's IPSec tables, load a new ini file with an empty IPSec table (shown
below).
Figure 126 Empty IPSec / IKE Tables
[IPSec_IKEDB_Table]
[\IPSec_IKEDB_Table]
[IPSEC_SPD_TABLE]
[\IPSEC_SPD_TABLE]

SSL/TLS

SSL, also known as TLS, is the method used to secure the V7111 SIP Signaling
connections, Embedded Web Server and Telnet server. The SSL protocol provides
confidentiality, integrity and authenticity between two communicating applications over
TCP/IP.
Specifications for the SSL/TLS implementation:
Supports transports:
Supports ciphers:
Authentication:
332
- When uploading the ini file from the gateway the IPSec and
SSL 2.0, SSL 3.0, TLS 1.0
DES, RC4 compatible
X.509 certificates; CRLs are not supported
3Com
®
VCX V7111 VoIP Gateway User Guide