Ipsec Parameters - AudioCodes Mediant 600 User Manual

User's Manual
Parameter
Web: Enable Last Login
Message
[SSHEnableLastLogin
Message]
Web: Max Login
Attempts
[SSHMaxLoginAttempt
s]

52.4.6 IPSec Parameters

The Internet Protocol security (IPSec) parameters are described in the table below.
Parameter
IPSec Parameters
Web: Enable IP Security
EMS: IPSec Enable
[EnableIPSec]
Web: IKE Certificate Ext
Validate
[IKEcertificateExtValida
te]
IPSec Associations Table
Web: IP Security
Associations Table
EMS: IPSec SA Table
[IPSecSATable]
Version 6.6
Enables message display in SSH sessions of the time and date of the
last SSH login. The SSH login message displays the number of
unsuccessful login attempts since the last successful login.

[0] Disable

[1] Enable (default)
Note: The last SSH login information is cleared when the device is reset.
Defines the maximum SSH login attempts allowed for entering an
incorrect password by an administrator before the SSH session is
rejected.
The valid range is 1 to 3. the default is 3.
IPSec Parameters
Enables IPSec on the device.

[0] Disable (default)

[1] Enable
Note: For this parameter to take effect, a device reset is required.
Enables the validation of the extensions (keyUsage and
extentedKeyUsage) of peer certificates. This validation ensures that the
signing CA is authorized to sign certificates and that the end-entity
certificate is authorized to negotiate a secure IPSec connection.

[[0] Disable (default)

[1] Enable
This table parameter defines the IPSec SA table. This table allows you to
configure the Internet Key Exchange (IKE) and IP Security (IPSec)
protocols. You can define up to 20 IPSec peers.
The format of this parameter is as follows:
[ IPsecSATable ]
FORMAT IPsecSATable_Index =
IPsecSATable_RemoteEndpointAddressOrName,
IPsecSATable_AuthenticationMethod, IPsecSATable_SharedKey,
IPsecSATable_SourcePort, IPsecSATable_DestPort,
IPsecSATable_Protocol, IPsecSATable_Phase1SaLifetimeInSec,
IPsecSATable_Phase2SaLifetimeInSec,
IPsecSATable_Phase2SaLifetimeInKB, IPsecSATable_DPDmode,
IPsecSATable_IPsecMode, IPsecSATable_RemoteTunnelAddress,
IPsecSATable_RemoteSubnetIPAddress,
IPsecSATable_RemoteSubnetPrefixLength,
IPsecSATable_InterfaceName;
[ \IPsecSATable ]
For example:
643
52. Configuration Parameters Reference
Description
Description
Mediant 600 & Mediant 1000