Configuring Your Ipsec Settings - 3Com OfficeConnect 3CR100A97 User Manual

8 - 24 C 8: A
HAPTER DVANCED
Configuring Your
IPSec Settings
C F
ONFIGURATION EATURES
the OfficeConnect Gateway menu bar to permanently save your VPN
tunnel configuration information.
To configure and customize the IPSEC settings for your VPN, perform the
following steps:
1 Select the appropriate re-key setting (Re-key every KB/Disable re-key) for
the IPSec encryption key from the Key Lifetime KB drop-down menu.
This parameter is applied to the volume of IP packets travelling across the
tunnel. The default value is Disable re-key. If you select Re-key every KB,
the field will dynamically change to allow you to specify a value for the
number of KBs (kilobytes of packet data) transported before re-keying is
required.
2 Select the appropriate re-key setting (Re-key every minutes/Disable
re-key) for the IPSec encryption key from the Key Lifetime Minutes
drop-down menu.
This parameter is applied to the time interval the tunnel is active. The
default value is for this parameter is Disable re-key. If you select Re-key
every Minutes, the field will dynamically change to allow you to specify a
value for the number of minutes the tunnel is active before re-keying is
required.
3 Select the appropriate Diffie-Hellman group (Mod1/Mod2) from the
Diffie-Hellman Group drop-down list.
4 Select the appropriate IPSec protocol from the Protocol drop-down menu.
The default is ESP (Encapsulation Security Payload).
ESP
If you select ESP, the page will dynamically change to show the ESP
parameters. Select an encapsulation type (Tunnel or Transport) from the
Encapsulation drop-down menu. Tunnel mode encrypts both the header
and the payload of each packet. Transport mode encrypts only the data
portion of each packet.
The Transport Mode can only be used for end-to-end IPSec tunnels, not
gateway-to-gateway tunnels. A possible use for Transport Mode would
be to protect the traffic through the Web Configurator or the Command
Line Interface (CLI via Telnet).
Select an authentication algorithm (None, MD5, SHA1) from the Hash