Nomadix Access Gateways User Manual page 98

Next you will define selectors of the Security Policy. All selectors must match for the
policy to be applied.
Define the following selectors for the
4.
Remote IP/Subnet

tunnel. The address can specify a host.
 Subnet Mask
tunnel.
 Remote UDP/TCP Port
UDP or TCP).
Security Policy can derive the settings for the Local End from the current Network IP
5.
settings of the unit. Select one of the following network options for the
 Use current Network Interface IP Address
use the current network interface IP Address. Note that the network IP address is
dynamic if DHCP or PPPoE client is enabled. This setting is the default setting.
Use this static IP address/subnet

Local IP/Subnet
policy



Enter the port number in the
6.
is UDP or TCP).
In the
7. Security Parameters
options are
 Discard
 Bypass
, or
only
– Select all the acceptable encryption algorithms by putting a check in the
 ESP
checkbox of each option; the options are:
setting. See
ESP and AH polices.
86
– Enter the IP address of the remote network secured by the IPSec
– Enter the subnet mask of the remote network secured by the IPSec
– Enter the port number;
, the
Subnet Mask
.
The
Local IP/Subnet
IPSec tunnel. The address can specify a host.
The is the subnet mask of the local network secured by the IPSec
Subnet Mask
tunnel. The address can specify a host.
The
IP address of network interface for this policy
NSE inside an IPSec tunnel. The IP address must be within the Local LAN
subnet or the same as the Local LAN IP address. IP address 0.0.0.0 disables the
functionality. The default setting is 0.0.0.0.
Local UDP/TCP Port
section, define the parameters of the security policy. The
Discard , Bypass , ESP
– Select the direction of the discard/bypass; the options are:
.
In and Out Out only
Setting joint ESP and AH parameters
:
Remote End
– Select this option if you would like to
– If you select this option you must also enter the
, and the
IP address of network interface for this
is the IP address of the local network secured by the
field;
, and AH . ESP is the default setting.
is the default setting.
DES , 3DES
A
CCESS
is for all ports (only if protocol is
0
Local End
is the IP Address for the
is for all ports (only if protocol
0
In only
, and NULL . 3DES
to set parameters that pertain to both
System Administration
G
ATEWAY
:
,
Out
is the default