AudioCodes Mediant 3000 User Manual page 148


To configure IP Security Proposals:
1. Open the 'IP Security Proposals Table page (Configuration tab > VoIP menu >
Security submenu > IPSec Proposal Table).
In the figure above, four proposals are defined.
2. Select an Index, click Edit, and then modify the proposal as required.
3. Click Apply.
4. To save the changes to flash memory, see 'Saving Configuration' on page 478.
To delete a proposal, select the relevant Index number, and then click Delete.
Table 11-2: IP Security Proposals Table Configuration Parameters
Parameter Name
Encryption Algorithm
[IPsecProposalTable_Encryption
Algorithm]
Authentication Algorithm
[IPsecProposalTable_Authentica
tionAlgorithm]
Diffie Hellman Group
[IPsecProposalTable_DHGroup]
If no proposals are defined, the default settings (shown in the following table) are applied.
Proposal
Proposal 0
Proposal 1
Proposal 2
Proposal 3
SIP User's Manual
Figure 11-3: IP Security Proposals Table
Determines the encryption (privacy) algorithm.

[0] NONE

[1] DES CBC

[2] 3DES CBC

[3] AES (default)
Determines the message authentication (integrity) algorithm.

[0] NONE

[2] HMAC SHA1 96

[4] HMAC MD5 96 (default)
Determines the length of the key created by the DH protocol for
up to four proposals. For the ini file parameter, X depicts the
proposal number (0 to 3).

[0] Group 1 (768 Bits) = DH-786-Bit

[1] Group 2 (1024 Bits) (default) = DH-1024-Bit
Table 11-3: Default IPSec/IKE Proposals
Encryption
3DES
3DES
3DES
3DES
148
Description
Authentication
SHA1
MD5
SHA1
MD5
Document #: LTRT-89712
Mediant 3000
DH Group
Group 2 (1024 bit)
Group 2 (1024 bit)
Group 1 (786 bit)
Group 1 (786 bit)