Siemens 5881 manual IKE IPSec Proposals Definition

Page 76

SIEMENS 5881 Broadband Internet Router

Chapter 6 Security Setup

User’s Guide

IKE/IPSec Configuration

 

 

IKE IPSec Proposals Definition

IKE IPSec Proposals specify how packets will be encrypted/authenticated for the final SA. To define a new IKE IPSec proposal:

1.Click Create next to IKE IPSec Proposals from the Advanced IKE/IPSec Setup page. This displays the IKE IPSec Proposal Definition page.

2.In IPSec Proposal Name, enter the logical name for the IKE IPSec Proposal Definition. This name is of no importance to the remote IKE peer.

3.From the AH Authentication Scheme drop-down menu, select one of the following to use as the hashing algorithm for Authentication Header (AH) IPSec:

NONE: Requests no AH encapsulation.

SHA1: Requests AH encapsulation and authenticate using Secure Hashing Algorithm 1.

MD5: Requests AH encapsulation and authenticate using Message Digest 5.

4.From the ESP Authentication Scheme drop-down menu, select one of the following ESP specify the hashing algorithm to used for Encapsulating Security Payload (ESP) IPSec:

NONE: Requests no AH encapsulation.

SHA1: Requests AH encapsulation and authenticate using Secure Hashing Algorithm 1.

MD5: Requests AH encapsulation and authenticate using Message Digest 5.

SIEMENS

70

Image 76
Contents Siemens Business Class Software License and Limited Warranty Software LicenseGeneral Provisions Table of Contents Advanced Setup User SetupSecurity Setup Monitoring Router Product Specifications Front PanelBack Panel Connection FunctionHardware Specifications Software Specifications Security Installation Requirements Package ContentsNetwork Service Provider Requirements PC RequirementsHardware Installation PC Configuration Windows 98/MEWindows NT Select TCP/IP Protocol from the Network Protocols listWindows Windows XP Mac OS Mac OSX Linux Configuring the Router Establish ConnectionRouter Information To do this Refer toAccess Easy Setup Wizard Select ProtocolUsing PPPoE Not Using PPPoEDynamic Host Configuration Protocol Siemens User Setup User ManagementAdding/Modifying a User Account Deleting a User Account User Lookup LocalRadius TacplusTrusted Secure Mode ConfigurationUntrusted Configure the Radius Server Configure the TacPlus Server Management Classes Class Functional AreasChange Password Access Control No access restrictionsClick Save and Reboot Telnet WebAdvanced Setup DMZ ApplyDMZ Router Clock Dhcp Dhcp Weighted Fair Queuing Differentiated Services FrameworkQoS Configure QoS policies Configure QoS Policy Siemens To the end Reorder QoS PoliciesBefore policy Routing Table Configuration Dial Backup Click Enable Dial BackupSwitch Management Switch Age Time Command Line Interface File Editor Security Setup Configure NAT NATConfigure the NAT Server Configure Host Mapping Default DisablePort Number Snmp Password Enter the New Password and New Password againSnmp IP Filter Click Add IP RangeSecure Shell Key GeneratorConfigure SSH Load Keys Key Generator Firewall Scripts Stateful Firewall Firewall RulesConfigure Stateful Firewall View Dropped Packets Configure Firewall Rules Protocol/Port ApplicationDelete Firewall Rules IKE/IPSec Configuration Easy IKE/IPSec Setup Advanced IKE/IPSec Setup IKE PeersIKE Peers Definition IKE Proposals Definition IKE IPSec Proposals Definition Siemens IKE IPSec Policies Definition Siemens VPN Log On Monitoring Router System SummaryEthernet Interface Information Remote Connection InformationIP Routing Information System InformationDiagnostics PPPoE SessionInterface Information Routing Table InformationFiles Information Memory UsageList All Configuration Data TCP/IP Statistics