Table of Contents
Advertisement
The following items are displayed on this screen:
Policy Name:
►
Operation Mode:
►
Enable Local ID:
►
Enable Remote ID:
►
Auth Mode:
►
Pre Share Key:
►
Enable Safety Proposal:
►
3.4.7.4.3 IPSEC Safety Proposal
In this table, you can view the information of IPSEC proposal.
Choose the menu Data Service→VPN→IPSec→IPSEC Safety Proposal to load the following page.
Figure 3-82 View IPSEC Safety Proposal Configuration
Click the Index in the entry you want to modify. If you want to delete the entry, select it and click the Del.
Click the Add button to add a new entry.
Figure 3-83 Add or Modify IPSEC Safety Proposal Entry
The following items are displayed on this screen:
BG9008W User Manual
Figure 3-81 Add or Modify IKE Safety Policy Entry
Specify a unique name to the IKE policy for identification and management
purposes. The IKE policy can be applied to IPSEC policy.
Select the IKE Exchange Mode in phase 1, and ensure the remote VPN
peer uses the same mode.
Main: Main mode provides identity protection and exchanges more
information, which applies to the scenarios with higher requirement for
identity protection.
Challenge: Challenge Mode establishes a faster connection but with lower
security, which applies to scenarios with lower requirement for identity
protection.
If enabled, enter a name for the local device as the ID in IKE negotiation.
If enabled, enter the name of the remote peer as the ID in IKE negotiation.
Select the authentication mode for this IKE policy entry.
PSK:
Certificate:
Enter the Pre-shared Key for IKE authentication, and ensure both the two
peers use the same key. The key should consist of visible characters
without blank space.
Select the Proposal for IKE negotiation phase 1. Up to four proposals can
be selected.
Page 57 of 133
Advertisement
Table of Contents
