Configuring Ike Policies - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual
Gigabit quad wan ssl vpn firewall
Hide thumbs
Also See for SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall:
- Configuration manual (8 pages) ,
- Use manual (9 pages) ,
- Network setup manual (8 pages)
Table of Contents
Advertisement
Configuring IKE Policies
The Internet Key Exchange (IKE) protocol performs negotiations between the two VPN gateways,
and provides automatic management of the keys that are used for IPsec connections. It is important
to remember that:
•
An automatically generated VPN policy ("Auto Policy") must use the IKE negotiation
protocol.
•
A manually generated VPN policy ("Manual Policy") cannot use the IKE negotiation protocol.
IKE policies are activated when the following situations occur:
1. The VPN policy selector determines that some traffic matches an existing VPN policy:
•
If the VPN policy is of an "Auto Policy" type, the IKE policy that is specified in the Auto
Policy Parameters section of the Add VPN Policy screen (see
used to start negotiations with the remote VPN gateway.
•
If the VPN policy is of a "Manual Policy" type, the settings that are specified in the
Manual Policy Parameters section of the Add VPN Policy screen (see
5-32) are accessed, and the first matching IKE policy is used to start negotiations with the
remote VPN gateway:
–
If negotiations fail, the next matching IKE policy is used.
–
If none of the matching IKE policies are acceptable to the remote VPN gateway, then
a VPN tunnel cannot be established.
2. An IKE session is established, using the security association (SA) settings that are specified in
a matching IKE policy:
•
Keys and other settings are exchanged.
•
An IPsec SA is established, using the settings that are specified in the VPN policy.
The VPN tunnel is then available for data transfer.
When you use the VPN Wizard to set up a VPN tunnel, an IKE policy is established and populated
in the List of IKE Policies, and is given the same name as the new VPN connection name. You can
also edit exiting policies or add new IKE policies from the IKE Policies screen.
Virtual Private Networking Using IPsec Connections
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
v1.0, April 2010
Figure 5-23 on page
5-32) is
Figure 5-23 on page
5-21
Advertisement
Table of Contents
Troubleshooting
