Extreme Networks Altitude 4700 Series Product Reference Manual page 232

Configuring Access Point Security
Inbound AH
Authentication Key
Outbound AH
Authentication Key
Inbound SPI (Hex)
Outbound SPI
(Hex)
ESP Type
ESP Encryption
Algorithm
Inbound ESP
Encryption Key
Outbound ESP
Encryption Key
232
Configure a key for computing the integrity check on
inbound traffic with the selected authentication algorithm.
The key must be 32/40 (for MD5/SHA1) hexadecimal (0-9,
A-F) characters in length. The key value must match the
corresponding outbound key on the remote security
gateway.
Configure a key for computing the integrity check on
outbound traffic with the selected authentication algorithm.
The key must be 32/40 (for MD5/SHA1) hexadecimal (0-9,
A-F) characters in length. The key value must match the
corresponding inbound key on the remote security
gateway.
Enter an up to six-character hexadecimal value to identify
the inbound security association created by the AH
algorithm. The value must match the corresponding
outbound SPI value configured on the remote security
gateway.
Provide an up to six-character hexadecimal value to
identify the outbound security association created by the
AH algorithm. The value must match the corresponding
inbound SPI value configured on the remote security
gateway.
ESP provides packet encryption, optional data
authentication and anti-replay services for the VPN tunnel.
Use the drop-down menu to select the ESP type. Options
include:
• None—Disables ESP. The rest of the fields are not be
active.
• ESP—Enables ESP for the tunnel.
• ESP with Authentication—Enables ESP with
authentication.
Select the encryption and authentication algorithms for the
VPN tunnel using the drop-down menu.
• DES—Uses the DES encryption algorithm requiring 64-
bit (16-character hexadecimal) keys.
• 3DES—Uses the 3DES encryption algorithm requiring
192-bit (48-character hexadecimal) keys.
• AES 128-bit—Uses the Advanced Encryption Standard
algorithm with 128-bit (32-character hexadecimal) keys.
• AES 192-bit—Uses the Advanced Encryption Standard
algorithm with 192-bit (48-character hexadecimal) keys.
• AES 256-bit—Uses the Advanced Encryption Standard
algorithm with 256-bit (64-character hexadecimal) keys.
Enter a key for inbound traffic. The length of the key is
determined by the selected encryption algorithm. The key
must match the outbound key at the remote gateway.
Define a key for outbound traffic. The length of the key is
determined by the selected encryption algorithm. The key
must match the inbound key at the remote gateway.
Altitude 4700 Series Access Point Product Reference Guide