AudioCodes Mediant 2000 User Manual page 434

The Format line (SPD_INDEX in the example below) specifies the order in which the
actual data lines are written. The order of the parameters is irrelevant. Parameters are
not mandatory unless stated otherwise. To support more than one Encryption /
Authentication proposals, for each proposal specify the relevant parameters in the
Format line. Note that the proposal list must be contiguous. The following is an
example of an SPD Table
[ IPSEC_SPD_TABLE ]
Format SPD_INDEX = IPSecPolicyRemoteIPAddress, IpsecPolicySrcPort,
IPSecPolicyDStPort,IPSecPolicyProtocol, IPSecPolicyLifeInSec,
IPSecPolicyProposalEncryption_0,
IPSecPolicyProposalAuthentication_0,
IPSecPolicyProposalEncryption_1,
IPSecPolicyProposalAuthentication_1,
IPSecPolicyKeyExchangeMethodIndex, IPSecPolicyLocalIPAddressType;
IPSEC_SPD_TABLE 0 = 10.11.2.21, 0, 0, 17, 900, 1,2, 2,2 ,1,0;
[ \IPSEC_SPD_TABLE ]
In the SPD example above, all packets designated to IP address 10.11.2.21 and
originating from the OAM interface (regardless to their destination and source ports)
and whose protocol is UDP, are encrypted. The SPD also defines an SA lifetime of
900 seconds and two security proposals: DES/SHA1 and 3DES/SHA1.
To configure the SPD (IPSec) Table using the Embedded Web
Server, take these 7 steps:
1. Access the Mediant 2000 Embedded Web Server (refer to 'Embedded Web
Server' on page 187).
2. From the main menu list on the left, click on the Advanced Configuration link.
The Advanced Configuration screen appears.
User's Manual 434
Mediant 2000
Document # LTRT-69805