Table of Contents
Advertisement
– See "Setting joint ESP and AH
AH
parameters that pertain to both ESP and AH policies.
Setting joint ESP and AH parameters
These parameters affect both ESP and AH policies.
Select all the
checkbox of each option; the options are:
are
MD5
Select the
material used in protecting the data independent of the keying material used for
protecting the IKE exchanges. The options are
default setting is
Enter the maximum lifetime (in seconds) in the
settings
Enter the maximum life size (in kbytes) in the
Enable the automatic renewal option by putting a check in the
checkbox. The default setting is enabled.
Click
8.
Add
Settings screen.
9.
Click the
Back to Main IPSec Tunneling Settings page
Settings screen.
Modifying an Existing IPSec Security Policy
1.
Click on the IPSec security policy link that you wish to modify in the
table. The IPsec Tunnel Security Policy Settings screen opens.
Policies
Modify the settings as desired.
2.
Click:
3.
Modify
Remove
Reset
original settings.
Click the
4.
Back to Main IPSec Tunneling Settings page
Settings screen.
130
Acceptable authentication algorithms
and
.
SHA
Perfect Forward Secrecy Strength
.
None
.
28800
to add the policy to the
to save the changes to the policy.
to remove the security policy from the
to undo any changes you made to the policy settings and return the policy to its
parameters" on page 130
,
MD5
SHA
to enable PFS. PFS makes the keying
None
Maximum Lifetime
Maximum Lifesize
IPSec Security Policy
IPSec Security Policies
A
CCESS
to set
by putting a check in the
, and
. The default settings
NULL
,
768-bit
, and
1024-bit
field. The default
field.
Automatic renewal
table on the IPSec Tunnel
link to return to the IPSec Tunnel
IPSec Security
link to return to the IPSec Tunnel
System Administration
G
ATEWAY
. The
table.
Advertisement
Table of Contents
