Defining The Ike Configuration - Brocade Communications Systems RFS6000 System Reference Manual

6

Defining the IKE Configuration

Refer to the Configuration tab to enable (or disable) IKE and define the IKE identity (for exchanging
identities).
Use IKE to specify IPSec tunnel attributes for an IPSec peer and initiate an IKE negotiation with the
tunnel attributes. This feature is best implemented in a crypto hub scenario. This scenario is
scalable since the keys are kept at a central repository (the Radius server) and more than one
switch and application can use the information.
To view the current set of IKE configurations:
1. Select Security > IKE Settings from the main menu tree.
2. Click the Configurations tab.
3. Set a Keep Alive interval (in seconds) the switch uses for monitoring the continued presence of
4. Click the Apply button (within the IKE Settings field) to save the configuration.
5. Click the Revert (within the IKE Settings field) to rollback to the previous configuration.
6. Refer to the Pre-shared Keys field to review the following information:
Peer IP Address
Key
NOTE
Please note that RSA keys are not supported for IKE negotiation on this switch.
7.
394
During IKE negotiations, peers must identify themselves to one another. Thus, the
configuration you define is the identification medium for device recognition.
a peer and report of the client's continued presence. The client notifies you when the peer is
no longer present. The default interval is 10 seconds.
Use the Peer IP Address to associate an IP address with the specific tunnel used by a group of
peers.
Displays the string ID a remote peer uses to look up pre-shared keys.
Highlight an existing set of pre-shared Keys and click the Edit button to revise the existing peer
IP address and key.
Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
53-1002515-01