Paradyne 1752 SHDSL User Manual page 80

1752 and 1754 SHDSL Router User's Guide
Option
interface name
Selector name
Policy log
Policy status
Policy priority
Policy action
IPsec Policy Stats
for policy
Complex SABundle
Prefer Old Flag
Step 4: Create IPSec SA
After successfully creating a new IPSec Policy, click on the Create IPSec SA link in step 4,
and then Create IPSec SA page is shown as follows:
80
Description
Name of the interface
Name of the selector
Enables or disables the status of the IPsec policy log.
Enables or disables the status of the IPsec policy.
The priority for the policy lookup. A lower priority value
means that this policy will be searched before a policy
with a higher priority value. The priority value should be
between 1 and 65565 inclusive, but it cannot be set to
255 or 256. These values are reserved for dynamic
policies.
e.g. 1.
The action specified by the policy (deny, bypass or
applyipsec)
statistics about the number of inbound and outbound
packets that match a specific IPsec policy.
This option is only relevant if applyipsec has been
selected. It is used to control the interpretation of
two tunnel mode SAs in an SA bundle as follows:
When two tunnel-mode SAs (SA1 and SA2) in a
bundle have the same local and peer end points and
complexsabundle is set to disable, then apart from
IPsec headers, only one new IP header is added on to
the original packet. For example, for an AH tunnel
- ESP tunnel SA bundle, the packet formed would
be as follows:
IP-AH-ESP-[IP_internal+Upper layer]
If complexsabundle is set to enable, the packet
formed would be as follows:
IP-AH-IP-ESP-[IP_internal+Upper layer]
When set to enable, this option specifies whether to
prefer the DYING SAs over MATURE SAs. When set to
disable, MATURE SAs are preferred instead. This
option is only applicable if your image supports IKE.
June 2005
Default value
n/a
n/a
false
false
n/a
bypass
n/a
false
false
1752-A2-GB20-00