Active Proposals; Inactive Proposals; Activate; Deactivate - Cisco VPN 3000 User Manual

Active Proposals

The field shows the names of IKE proposals that have been configured, activated, and prioritized. As an
IPSec responder, the VPN Concentrator checks these proposals in priority order, to see if it can find one
that agrees with parameters in the initiator's proposed SA.
Activating a proposal also makes it available for use wherever the Manager displays an IKE Proposal list,
and the first active proposal appears as the default selection.

Inactive Proposals

The field shows the names of IKE proposals that have been configured but are inactive. New proposals
appear in this list when you first configure and add them. The VPN Concentrator does not use these
proposals in any IPSec negotiations, nor do they appear in IKE Proposal lists.
Note:
To configure L2TP over IPSec, you must activate IKE-3DES-MD5-RSA . Also see the Configuration | User
Management
<< Activate
To activate an inactive IKE proposal, select it from the Inactive Proposals list and click this button. The
Manager moves the proposal to the Active Proposals list and refreshes the screen.
>> Deactivate
To deactivate an active IKE proposal, select it from the Active Proposals list and click this button. If the
active proposal is configured on a Security Association, the Manager displays an error message; and you
must remove it from the SA before you can deactivate it. Otherwise, the Manager moves the proposal to
the Inactive Proposals list and refreshes the screen.

Move Up / Move Down

To change the priority order of an active IKE proposal, select it from the Active Proposals list and click
Move Up
These actions move the proposal up or down one position.

Add

To configure and add a new IKE proposal to the list of Inactive Proposals , click this button. See
Configuration | System | Tunneling Protocols | IPSec | IKE Proposals | Add
VPN 3000 Concentrator Series User Guide
screens.
or Move Down . The Manager refreshes the screen and shows the reordered Active Proposals list.
Configuration | System | Tunneling Protocols | IPSec | IKE Proposals
.
7-21