Secure Computing SG300 User Manual page 237

o IPSec is disabled.
o The tunnel is disabled.
o The tunnel could not be loaded due to misconfiguration.
Negotiating Phase 1 indicates that IPSec is negotiating Phase 1 to establish the
tunnel. Aggressive or Main mode packets (depending on tunnel configuration)
are transmitted during this stage of the negotiation process.
Negotiating Phase 2 indicates that IPSec is negotiating Phase 2 to establish the
tunnel. Quick mode packets are transmitted during this stage of the negotiation
process.
Running indicates that the tunnel has been established.
Tunnels that use Manual Keying are in either a Down or Running state.
For tunnels that use Automatic Keying, further negotiation details can be seen by clicking
on the status. A window similar to the following is displayed.
Interfaces Loaded lists the SnapGear unit's interfaces which IPSec is using.
Phase 2 Ciphers Loaded lists the encryption ciphers that tunnels can be configured with
for Phase 2 negotiations. This includes DES, 3DES and AES.
Phase 2 Hashes Loaded lists the authentication hashes that tunnels can be configured
with for Phase 2 negotiations. This includes MD5 and SHA1 (otherwise known as SHA).
Phase 1 Ciphers Loaded lists the encryption ciphers that tunnels can be configured with
for Phase 1 negotiations. This includes DES, 3DES and AES.
Phase 1 Hashes Loaded lists the authentication hashes that tunnels can be configured
with for Phase 1 negotiations. This includes MD5 and SHA.
Virtual Private Networking
231