Table 3-14: Default Ike Second Phase Proposals; Table 3-15: Ipsec Spd Table Configuration Parameters - AudioCodes Mediant 2000 User Manual

SIP User's Manual
If no IPSec methods are defined (Encryption / Authentication), the default settings, shown in
the following table are applied.
Proposal
Proposal 0
Proposal 1
Proposal 2
Proposal 3

Table 3-15: IPSec SPD Table Configuration Parameters

Parameter Name
IPSec Mode
[IPSecMode]
Remote Tunnel IP Address
[IPSecPolicyRemoteTunnelIPAddress]
Remote Subnet Mask
[IPsecPolicyRemoteSubnetMask]
Remote IP Address
[IPSecPolicyRemoteIPAddress]
Local IP Address Type
[IPSecPolicyLocalIPAddressType]
Source Port
[IPSecPolicySrcPort]
Version 5.8

Table 3-14: Default IKE Second Phase Proposals

Encryption
3DES
3DES
DES
DES
Defines the IPSec mode of operation.


Defines the IP address of the remote
IPSec tunneling device.
Note:
the parameter IPSecMode is set to
Tunneling (1).
Defines the subnet mask of the remote
IPSec tunneling device.
The default value is 255.255.255.255
(i.e., host-to-host IPSec tunnel).
Note:
the parameter IPSecMode is set to
Tunneling (1).
Destination IP address (or FQDN) to
which the IPSec mechanism is applied.
Notes:


Determines the local interface to which
the encryption is applied (applicable to
multiple IPs and VLANs).


Defines the source port to which the
IPSec mechanism is applied.
The default value is 0 (i.e., any port).
Description
[0] Transport (Default)
[1] Tunneling
This parameter is available only if
This parameter is available only if
This parameter is mandatory.
When an FQDN is used, a DNS
server must be configured
(DNSPriServerIP).
[0] OAM = OAMP interface (default).
[1] Control = Control interface.
91
3. Web-Based Management
Authentication
SHA1
MD5
SHA1
MD5
IPSec is
applied to
outgoing
packets
that match
the values
defined for
these
parameters.
October 2009