Table 3-16: Default Ike First Phase Proposals; Table 3-17: Ike Table Configuration Parameters - AudioCodes Mediant 2000 User Manual

Media gateway
Hide thumbs Also See for Mediant 2000:
Table of Contents

Advertisement

If no IKE methods are defined (Encryption / Authentication / DH Group), the default settings
(shown in the following table) are applied.
Proposal
Proposal 0
Proposal 1
Proposal 2
Proposal 3
The parameters described in the following table are used to configure the first phase (main
mode) of the IKE negotiation for a specific peer. A different set of parameters can be
configured for each of the 20 available peers.
Parameter Name
Authentication Method
[IkePolicyAuthenticationMethod]
Shared Key
[IKEPolicySharedKey]
SIP User's Manual

Table 3-16: Default IKE First Phase Proposals

Encryption
3DES
3DES
3DES
3DES

Table 3-17: IKE Table Configuration Parameters

Determines the authentication method for IKE.
[0]
[1] RSA Signature
Notes:
For pre-shared key authentication, peers participating in
an IKE exchange must have a prior (out-of-band)
knowledge of the common key (see
IKEPolicySharedKey parameter).
For RSA signature authentication, peers must be loaded
with a certificate signed by a common CA. For additional
information on certificates, refer to ''Server Certificate
Replacement''
Determines the pre-shared key (in textual format). Both
peers must register the same pre-shared key for the
authentication process to succeed.
Notes:
The pre-shared key forms the basis of IPSec security
and should therefore, be handled cautiously (in the
same way as sensitive passwords). It is not
recommended to use the same pre-shared key for
several connections.
Since the ini file is in plain text format, loading it to the
device over a secure network connection is
recommended, preferably over a direct crossed-cable
connection from a management PC. For added
confidentiality, use the encoded ini file option (described
in ''Secured Encoded ini File''
After it is configured, the value of the pre-shared key
cannot be obtained via Web interface, ini file, or SNMP
(refer the Product Reference Manual).
Authentication
SHA1
MD5
SHA1
MD5
Description
Pre-shared Key (default)
on page
85
.
94
Mediant 2000
DH Group
1024
1024
786
786
on page
197
).
Document #: LTRT-68809

Advertisement

Table of Contents
loading

Table of Contents