Nomadix Access gateway User Manual page 141

A G
CCESS ATEWAY
Next you will define selectors of the Security Policy. All selectors must match for the
policy to be applied.
Define the following selectors for the
4.
 Remote IP/Subnet
tunnel. The address can specify a host.
Subnet Mask

tunnel.
Remote UDP/TCP Port

UDP or TCP).
Security Policy can derive the settings for the Local End from the current Network IP
5.
settings of the unit. Select one of the following network options for the
Use current Network Interface IP Address

use the current network interface IP Address. Note that the network IP address is
dynamic if DHCP or PPPoE client is enabled. This setting is the default setting.
 Use this static IP address/subnet
Local IP/Subnet
this policy



Enter the port number in the
6.
is UDP or TCP).
7. In the Security Parameters
options are
Discard

Bypass

, or
only
– Select all the acceptable encryption algorithms by putting a check in the
ESP

checkbox of each option; the options are:
setting. See "Setting joint ESP and AH
parameters that pertain to both ESP and AH polices.
System Administration
– Enter the IP address of the remote network secured by the IPSec
– Enter the subnet mask of the remote network secured by the IPSec
– Enter the port number;
, the
Subnet Mask
.
The Local IP/Subnet
IPSec tunnel. The address can specify a host.
The is the subnet mask of the local network secured by the IPSec
Subnet Mask
tunnel. The address can specify a host.
The
IP address of network interface for this policy
NSE inside an IPSec tunnel. The IP address must be within the Local LAN
subnet or the same as the Local LAN IP address. IP address 0.0.0.0 disables the
functionality. The default setting is 0.0.0.0.
Local UDP/TCP Port
section, define the parameters of the security policy. The
, ,
Discard Bypass ESP
– Select the direction of the discard/bypass; the options are:
.
In and Out Out only
:
Remote End
– Select this option if you would like to
– If you select this option you must also enter the
, and the
IP address of network interface for
is the IP address of the local network secured by the
field;
, and . is the default setting.
AH ESP
is the default setting.
,
DES 3DES
parameters" on page 130
is for all ports (only if protocol is
0
Local End
is the IP Address for the
is for all ports (only if protocol
0
In only
, and .
NULL 3DES
:
,
Out
is the default
to set
129