Table 18-3: Spd Table Configuration Parameters - AudioCodes Mediant 2000 User Manual

Mgcp, megaco, tpncp voip mediant media gateways
Hide thumbs Also See for Mediant 2000:
Table of Contents

Advertisement

Parameter Name
Remote IP Address
[IPSecPolicyRemoteIPAddress]
Local IP Address Type
[IPSecPolicyLocalIPAddressType]
Source Port
[IPSecPolicySrcPort]
Destination Port
[IPSecPolicyDstPort]
Protocol
[IPSecPolicyProtocol]
Related Key Exchange Method
Index
[IPsecPolicyKeyExchangeMethod
Index]
IKE Second Phase Parameters (Quick Mode)
SA Lifetime (sec)
[IPsecPolicyLifeInSec]
SA Lifetime (KByte)
[IPSecPolicyLifeInKB]
User's Manual

Table 18-3: SPD Table Configuration Parameters

Description
Defines the destination IP address (or a
FQDN) the IPSec mechanism is applied
to.
This parameter is mandatory.
Note: When a FQDN is used, a DNS
server must be configured
(DNSPriServerIP).
If multiple IP's/VLANs are configured, the
user should define the required local
interface on which to apply encryption.
Valid Address Type values are:
OAM interface
Control interface
Default value is 2 (Control interface)
Defines the source port the IPSec
mechanism is applied to.
The default value is 0 (any port).
Defines the destination port the IPSec
mechanism is applied to.
The default value is 0 (any port).
Defines the protocol type the IPSec
mechanism is applied to.
0 = Any protocol (default)
17 = UDP
6 = TCP
Or any other protocol type defined by
IANA (Internet Assigned Numbers
Authority).
Determines the index for the corresponding IKE entry. Note that
several policies can be associated with a single IKE entry.
The valid range is 0 to 19. The default value is 0.
Determines the duration (in seconds) for which the negotiated
SA in the second IKE session (quick mode) is valid. After the
time expires, the SA is re-negotiated.
The default value is 28800 (8 hours).
Determines the duration (in kilobytes) for which the negotiated
SA in the second IKE session (quick mode) is valid. After this
size is reached, the SA is re-negotiated.
[0]
[2]
432
Mediant 2000
IPSec is applied to
outgoing packets
whose IP address,
destination port,
source port and
protocol type match
the values defined
for these four
parameters.
Document # LTRT-69805

Advertisement

Table of Contents
loading

Table of Contents