Siemens se5880 manual Siemens

Page 75

SIEMENS se5880 Ethernet Security Router

Chapter 6 Security Setup

User’s Guide

IKE/IPSec Configuration

 

 

5.From the ESP Encryption Type drop-down menu, select one of the following to specify the algorithm to use to encrypt ESP IPSec packets:

DES: Encrypts using a 56-bit key.

3DES: Encrypts using three 56-bit keys to produce 168-bit encryption.

NULL: ESP encapsulation, but no data encryption. ESP encapsulation verifies the source, but data is sent in the clear to increase throughput.

NONE: No ESP encapsulation and no encryption is used.

6.From the IP Compression Method drop-down menu, select one of the following to specify the algorithm to to use to compress IPSec packets: LZS IP compression or None.

7.In Phase II Proposal Lifetime, enter the number of seconds after the IPSec SA expires. The default is 1800 seconds. Once this time is elapsed, the system will renegotiate the IKE connection.

8.In Phase II Proposal Life Data, enter the amount of data, measured in kilobytes, before the IPSec SA terminates. After the specified quantity of data has been transferred, the system will renegotiate the IKE connection. If zero is entered, the data quantity will be unlimited. By setting a limit on the amount of data transferred, the risk of a key becoming compromised is reduced.

9.Click Apply.

SIEMENS

69

Image 75
Contents Se5880 Software License Software License and Limited WarrantyGeneral Provisions Table of Contents User Setup Advanced SetupSecurity Setup Monitoring Router Back Panel Front PanelHardware Specifications Software Specifications Security PC Requirements Installation RequirementsPackage Contents Network Service Provider RequirementsHardware Installation Windows 98/ME PC ConfigurationSelect TCP/IP Protocol from the Network Protocols list Windows NTWindows Windows XP Mac OS Mac OSX Linux Establish Connection Configuring the RouterTo do this Refer to Router InformationNot Using PPPoE Access Easy Setup WizardUntrusted Interface Configuration Using PPPoENot Using PPPoE Using PPPoEDynamic Host Configuration Protocol Trusted Interface Configuration User Management User SetupAdding/Modifying a User Account Deleting a User Account None User LookupLocal RadiusSecure Mode Configuration TrustedUntrusted Configure the Radius Server Configure the TacPlus Server Class Functional Areas Management ClassesChange Password Telnet Web Access ControlNo access restrictions Click Save and RebootAdvanced Setup Apply DMZDMZ Router Clock Dhcp QoS Configure QoS Policy Siemens Reorder QoS Policies To the endBefore policy Routing Table Configuration Click Enable Dial Backup Dial BackupInternal Modem External Modem Switch Management Switch Mirror Configuration Switch Age Time Command Line Interface File Editor Security Setup NAT Disable DefaultPort Number Click Add IP Range Snmp PasswordEnter the New Password and New Password again Snmp IP FilterKey Generator Secure ShellConfigure SSH Load Keys Key Generator Firewall Scripts Firewall Rules Stateful FirewallConfigure Stateful Firewall View Dropped Packets Configure Firewall Rules Application Protocol/PortDelete Firewall Rules IKE/IPSec Configuration Easy IKE/IPSec Setup IKE Peers Advanced IKE/IPSec SetupIKE Peers Definition IKE Proposals Definition IKE IPSec Proposals Definition Siemens IKE IPSec Policies Definition Siemens VPN Log On System Summary Monitoring RouterRemote Connection Information Ethernet Interface InformationSystem Information IP Routing InformationPPPoE Session DiagnosticsATM Statistics Interface InformationFiles Information Routing Table InformationMemory Usage List All Configuration DataTCP/IP Statistics