Figure 3-272: Ipsec Tab - Ipsec Automatic Phase 1 - AudioCodes Mediant 800 MSBG User Manual

Mediant 800 MSBG
IPSec Automatic Phase 1 – Peer Authentication:

Figure 3-272: IPSec Tab - IPSec Automatic Phase 1

Mode: Select the IPSec mode – either 'Main Mode' or 'Aggressive
Mode'. Main mode is a secured but slower mode, which presents
negotiable propositions according to the authentication algorithms that
you select in the check boxes. Aggressive Mode is faster but less
secured. When selecting this mode, the algorithm check boxes are
replaced by options, presenting strict propositions according to your
selections.
Negotiation Attempts: Select the number of negotiation attempts to be
performed in the automatic key exchange method. If all attempts fail,
the device waits for a negotiation request.
Life Time in Seconds: The timeframe in which the peer authentication
is valid.
Rekey Margin: Specifies how long before connection expiry should
attempts to negotiate a replacement begin. It is similar to that of the key
life time and is given as an integer denoting seconds.
Rekey Fuzz Percent: Specifies the maximum percentage by which
Rekey Margin should be randomly increased to randomize re-keying
intervals.
Peer Authentication: Select the method by which the device
authenticates your IPSec peer.
IPSec Shared Secret: Enter the IPSec shared secret.
- RSA Signature – Enter the peer's RSA signature (based on the
device's public key).
- Certificate – If a certificate exists on the device, it appears when you
select this option. Enter the certificate's local ID and peer ID.
Encryption Algorithm: Select the encryption algorithms that the device
attempts to use when negotiating with the IPSec peer.
SIP User's Manual 320 Document #: LTRT-12804