Siemens 5890 manual IKE/IPSec Configuration

Page 85

SIEMENS 5890 DSL Router

Chapter 6 Security Setup

User’s Guide

IKE/IPSec Configuration

 

 

IKE/IPSec Configuration

IPSec (Internet Protocol Security) is an open standard that defines optional authentication and encryption methods at the IP packet level. IPSec can only handle IP packets.

IPsec is especially useful for implementing Virtual Private Networks and for remote user access through dial- up connections to private networks. IPSec is a true network layer protocol that provides authentication, privacy, and data integrity. IPSec must be supported at both ends of the connection.

IPSec does not require modification of individual applications or devices for secure data transport. Because it does require global IP addresses for all peers, Network Address Translation (NAT) can be used with IPSec.

To configure IKE/IPSec:

1.Click IKE/IPSec Configuration from the left navigation pane of the Router Information window. This displays the IKE/IPSec Information page.

2. Select one of the following from the left navigation pane:

Easy IKE/IPSec Setup

Perform basic IKE/IPSec setup.

Advanced IKE/IPSec Setup

Perform advanced IKE/IPSec setup.

SIEMENS

79

Image 85
Contents 5890 Software License Software License and Limited WarrantyGeneral Provisions Table of Contents Advanced Setup User SetupSecurity Setup Monitoring Router Back Panel Front PanelHardware Specifications Software Specifications PPP RFC 1661, RFC Frame RelaySecurity Package Contents Installation RequirementsPC Requirements Network Service Provider Requirements Hardware Installation Windows 98/ME PC ConfigurationSelect TCP/IP Protocol from the Network Protocols list Windows NTWindows Windows XP Mac OS Mac OSX Linux Establish Connection Configuring the RouterTo do this Refer to Router InformationSelect Protocol Access Easy Setup WizardIP Routing Enabled Bridging EnabledPoint-to-Point Protocol over ATM VC Multiplexing Block Net Bios Traffic NAT EnabledPoint-to-Point Protocol over ATM LLC Encapsulation NAT Enabled RFC 1483 Multiprotocol Encapsulation LLC/SNAP RFC 1483 VC Multiplexing Routed Point-to-Point Protocol over Ethernet over RFC1483 RFC 1483 MAC Encapsulated Routing MER RAW IP Dynamic Host Configuration Protocol Local Area Network Configuration User Management User SetupAdding/Modifying a User Account Deleting a User Account Local User LookupRadius NoneTrusted Secure Mode ConfigurationUntrusted Configure the Radius Server Configure the TacPlus Server Class Functional Areas Management ClassesChange Password No access restrictions Access ControlClick Save and Reboot Telnet WebAdvanced Setup Sdsl ATM or Sdsl Frame Relay WAN SelectionRemote File Configuration DMZ DMZ Router Clock Dhcp Dhcp Weighted Fair Queuing Differentiated Services FrameworkQoS Configure QoS policies Configure QoS Policy Siemens To the end Reorder QoS PoliciesBefore policy Routing Table Configuration Click Enable Dial Backup Dial BackupATM Traffic Shaping Real-Time Variable Bit Rate Constant Bit RateNon Real-Time Variable Bit Rate Unspecified Bit RateSwitch Management Switch Mirror Configuration Switch Age Time Command Line Interface File Editor Security Setup NAT NAT Server Configuration NAT Host Mapping Default DisablePort Number Click Add IP Range Snmp IP FilterEnter the New Password and New Password again Snmp PasswordKey Generator Secure ShellConfigure SSH Load Keys Key Generator Firewall Scripts Firewall Rules Stateful FirewallConfigure Stateful Firewall View Dropped Packets Configure Firewall Rules Application Protocol/PortDelete Firewall Rules IKE/IPSec Configuration Easy IKE/IPSec Setup IKE Peers Advanced IKE/IPSec SetupIKE Peers Definition IKE Proposals Definition IKE IPSec Proposals Definition Siemens IKE IPSec Policies Definition Siemens VPN Log On System Summary Monitoring RouterRemote Connection Information Ethernet Interface InformationSystem Information IP Routing InformationPPPoE Session DiagnosticsATM Statistics Interface InformationFiles Information Routing Table InformationMemory Usage List All Configuration DataTCP/IP Statistics