Siemens 5881 manual IKE Proposals Definition

Page 75

SIEMENS 5881 Broadband Internet Router

Chapter 6 Security Setup

User’s Guide

IKE/IPSec Configuration

 

 

IKE Proposals Definition

IKE I proposals specify how packets will be encrypted/authenticated for Phase I. To define a new IKE proposal:

1.Click Create next to IKE Proposals from the Advanced IKE/IPSec Setup page. This displays the IKE Proposal Definition page.

2.In IKE Proposal Name, enter a logical name for the IKE Proposal Definition. This name is of no importance to the remote IKE peer.

3.From the Message Authentication Scheme drop-down menu, select one of the following hashing (authentication) options to use to validate IKE Phase I exchange:

MD5: Performs message authentication using Message Digest 5.

SHA1: Performs message authentication using Secure Hashing Algorithm 1 (default).

4.From the Diffie-Hellman (Oakley) Group drop-down menu, select one of the following Diffie-Hellman key generation groups to use during IKE Phase I exchange:

Group 1: Uses Diffie-Hellman Group 1 (768 bits).

Group 2: Uses Diffie-Hellman Group 2 (1024 bits).

5.From the Encryption Type drop-down menu, select one of the following encryption types to use during IKE Phase II (Quick Mode) exchange:

DES: Encrypts using a 56-bit key.

3-DES: Encrypts using three 56-bit keys to produce 168-bit encryption.

AES: Encrypts using a 128-, 192-, or 256-bit key.

6.If you selected AES as the encryption type, specify the key bit size to use in Key Length. This can be 128, 192, or 256.

7.In Phase I Proposal Lifetime, enter the number of seconds after which the Phase I negotiation expires. The default is 1800 seconds. Once this time is elapsed, the system will renegotiate the IKE connection.

8.Click Apply.

SIEMENS

69

Image 75
Contents Siemens Business Class Software License Software License and Limited WarrantyGeneral Provisions Table of Contents User Setup Advanced SetupSecurity Setup Monitoring Router Front Panel Product SpecificationsConnection Function Back PanelHardware Specifications Software Specifications Security PC Requirements Installation RequirementsPackage Contents Network Service Provider RequirementsHardware Installation Windows 98/ME PC ConfigurationSelect TCP/IP Protocol from the Network Protocols list Windows NTWindows Windows XP Mac OS Mac OSX Linux Establish Connection Configuring the RouterTo do this Refer to Router InformationSelect Protocol Access Easy Setup WizardNot Using PPPoE Using PPPoEDynamic Host Configuration Protocol Siemens User Management User SetupAdding/Modifying a User Account Deleting a User Account Tacplus User LookupLocal RadiusSecure Mode Configuration TrustedUntrusted Configure the Radius Server Configure the TacPlus Server Class Functional Areas Management ClassesChange Password Telnet Web Access ControlNo access restrictions Click Save and RebootAdvanced Setup Apply DMZDMZ Router Clock Dhcp Dhcp Differentiated Services Framework Weighted Fair QueuingQoS Configure QoS policies Configure QoS Policy Siemens Reorder QoS Policies To the endBefore policy Routing Table Configuration Click Enable Dial Backup Dial BackupSwitch Management Switch Age Time Command Line Interface File Editor Security Setup NAT Configure NATConfigure the NAT Server Configure Host Mapping Disable DefaultPort Number Click Add IP Range Snmp PasswordEnter the New Password and New Password again Snmp IP FilterKey Generator Secure ShellConfigure SSH Load Keys Key Generator Firewall Scripts Firewall Rules Stateful FirewallConfigure Stateful Firewall View Dropped Packets Configure Firewall Rules Application Protocol/PortDelete Firewall Rules IKE/IPSec Configuration Easy IKE/IPSec Setup IKE Peers Advanced IKE/IPSec SetupIKE Peers Definition IKE Proposals Definition IKE IPSec Proposals Definition Siemens IKE IPSec Policies Definition Siemens VPN Log On System Summary Monitoring RouterRemote Connection Information Ethernet Interface InformationSystem Information IP Routing InformationPPPoE Session DiagnosticsRouting Table Information Interface InformationMemory Usage Files InformationTCP/IP Statistics List All Configuration Data