Table 5-43: Ike Table Configuration Parameters - AudioCodes MediaPack MP-11X User Manual

SIP User's Manual
From the 'Policy Index' drop-down list, select the peer you want to edit (up to 20 peers
3.
can be configured).
Configure the IKE parameters according to the parameters described in the table
4.
below. Up to two IKE main mode proposals (Encryption / Authentication / DH group
combinations) can be defined. The same proposals must be configured for all peers.
Click Create; a row is create in the IKE table
5.
To save the changes to flash memory, refer to 'Saving Configuration' on page 238.
6.
To delete a peer from the IKE table, select it from the 'Policy Index' drop-down list, click the
button Delete, and then click OK at the prompt.
The parameters described in the following table are used to configure the first phase (main
mode) of the IKE negotiation for a specific peer. A different set of parameters can be
configured for each of the 20 available peers.
Parameter Name
Authentication Method
[IkePolicyAuthenticationM
ethod]
Shared Key
[IKEPolicySharedKey]
IKE SA LifeTime (sec)
[IKEPolicyLifeInSec]
Version 5.2

Table 5-43: IKE Table Configuration Parameters

Determines the authentication method for IKE.
The valid authentication method values include:
[0] Pre-shared Key (default)
[1] RSA Signature
Notes:
For pre-shared key based authentication, peers participating in an
IKE exchange must have a prior (out-of-band) knowledge of the
common key (see IKEPolicySharedKey parameter).
For RSA signature based authentication, peers must be loaded with
a certificate signed by a common CA. For additional information on
certificates, refer to 'Server Certificate Replacement' on page 193.
Determines the pre-shared key (in textual format).
Both peers must register the same pre-shared key for the
authentication process to succeed.
Notes:
The pre-shared key forms the basis of IPSec security and should
therefore be handled cautiously (in the same way as sensitive
passwords). It is not recommended to use the same pre-shared key
for several connections.
Since the ini file is in plain text format, loading it to the gateway over
a secure network connection is recommended, preferably over a
direct crossed-cable connection from a management PC. For added
confidentiality, use the encoded ini file option (described in 'Secured
ini File' on page 251).
After it is configured, the value of the pre-shared key cannot be
obtained via Embedded Web Server, ini file, or SNMP (refer the SIP
Series Reference Manual).
Determines the time (in seconds) the SA negotiated in the first IKE
session (main mode) is valid. After the time expires, the SA is re-
negotiated.
The default value is 28800 (8 hours).
Description
205
5. Web-based Management
August 2007