Certificate Upload; Security Association Settings - IBM TS3100 Setup, Operator, And Service Manual

Table 37. IKE settings (continued)
Name of setting
Host Authentication ID

8. Certificate Upload

The file selection box displays under the IPSec page, and it is available even before a new policy is
created.
Figure 121. Certificate Upload

9. Security Association Settings

The Security Association settings define the parameter and algorithms for the Security Association
(SA) used in an IPSec session in case the associated policy is used. In case IKE is not used, these
settings must be the same as on the peer side. If IKE is used, only the AH/ESP selection and the
algorithms are needed.
Figure 122. Security Association settings
Table 38. Security Association settings
Name of setting
Enable AH
Available values
v All
v IPv6 Address
v FQDN
v E-Mail-Address
Available Values
checked/unchecked
Comments
ID value that is compared against the
peer ID.
v All
Any peer ID is accepted.
v IPv6 Address
Peer IP address is compared.
v FQDN
Peers FQDN ID is compared.
v Email Address
Peers email address is compared.
Comments
AH (Authentication Header) mode
activation
Operations
143