Nokia CC500 - VPN - Gateway Connection Manual page 7

1.2. Configuring Nokia CryptoCluster 500
1. Select the certification authority for IKE authentication (in this example, root).
2. Select Encryption and Integrity as the IPSec policy.
3. Click Edit to configure the IPSec policy and make the settings shown in Figure 1.2 (CryptoCluster
Encryption and Integrity settings)):
Figure 1.2: CryptoCluster Encryption and Integrity settings
4. Click Advanced... and make the settings shown in Figure 1.3 (CryptoCluster Advanced IPSec
settings):
5. In the Client Policy view, click Settings... to configure the Client IKE Policy.
6. Select Edit to modify an existing IKE policy, or Add to create a new one.
Make the settings shown in Figure 1.4 (CryptoCluster IKE Policy settings) and click OK twice to close
the dialogs.
7. Click the Access tab in the Client Policy view and select the access policy that suits your needs.
This is likely to be The gateway's protected host groups. Please note that the host group must match
the remote network you define later in SSH Sentinel settings.
8. On the left pane of the of the Gateway Properties window, select Client Access.
VPN with SSH Sentinel and Nokia CryptoCluster
Figure 1.3: CryptoCluster Advanced IPSec settings
c 2002 SSH Communications Security Corp.
7