4. Configuring the Machine Using Utilities
IPsec Settings
Item | Description |
|
|
Encapsulation Type | Specify the encapsulation type from the following: |
| • [Transport]: Select this mode to secure only the payload section of |
| each IP packet when communicating with IPsec compliant devices. |
| • [Tunnel]: Select this mode to secure every section of each IP packet. |
| We recommend this type for communication between security |
| gateways (such as VPN devices). |
|
|
Security Protocol | Select the security protocol from the following: |
| • [AH]: Establishes secure communication that supports authentication |
| only. |
| • [ESP]: Establishes secure communication that supports both |
| authentication and data encryption. |
| • [ESP&AH]: Establishes secure communication that supports both data |
| encryption and authentication of packets, including packet headers. |
| Note that you cannot specify this protocol when [Tunnel] is selected |
| for [Encapsulation Type]. |
|
|
Authentication | Specify the authentication algorithm to be applied when [AH] or [ESP&AH] |
Algorithm for AH | is selected for [Security Protocol] from the following: |
| [MD5], [SHA1] |
|
|
Encryption Algorithm | Specify the encryption algorithm to be applied when [ESP] or [ESP&AH] is |
for ESP | selected for [Security Protocol] from the following: |
| [None], [DES], [3DES], |
|
|
Authentication | Specify the authentication algorithm to be applied when [ESP] is selected |
Algorithm for ESP | for [Security Protocol] from the following: |
| [MD5], [SHA1] |
|
|
Life Time | Specify the life time of the IPsec SA (Security Association) as a time period |
| or data volume. The SA will expire when the time period you specify |
| elapses or the volume of data you specify reaches the volume carried. |
| If you specify both a time period and a data volume, the SA will expire as |
| soon as either is reached, and a new SA will then be obtained by |
| negotiation. |
| To specify the life time of the SA as a time period, enter a number of |
| seconds. |
| To specify the life time of the SA as a data volume, enter a number of KBs. |
|
|
54