HP Enterprise File Services WAN Accelerator manual Enabling Encryption, Entries

Control	Description
Add New Entry	Neighbor IP. Specify the in-path IP address for the neighbor appliance. When you
	define a neighbor, you must specify the appliance in-path IP address, not the primary IP
	address.
	Neighbor Port. Specify the in-path port for the neighbor appliance. The default is 7850.
	Add Peer. Click Add Peer to add a neighbor to the peer list.
	Remove Selected Entries. To remove an entry, select it and click Remove Selected
	Entries.

Enabling Encryption

4.Click Save to save your settings permanently or click Reset to return the settings to their previous values.

You configure IP Security Protocol (IPsec) encryption to allow data to be communicated securely between peer HP EFS WAN Accelerators in the Advanced Networking - Encryption page.

Enabling IPsec encryption makes it difficult for a third party to view your data or pose as a machine you expect to receive data from. To enable IPsec, you must specify at least one encryption and authentication algorithm. Only optimized data is protected, pass-through traffic is not.

Enabling IPsec support is optional.

IMPORTANT: You must set IPsec support on each peer HP EFS WAN Accelerator in your network for which you want to establish a secure connection. You must also specify a shared secret on each peer HP EFS WAN Accelerator.

NOTE: If you Network Address Translate (NAT) traffic between HP EFS WAN Accelerators, you cannot use the IPSEC channel between the appliances because the NAT changes the packet headers causing IPSEC to reject them.

70 CONFIGURING THE HP EFS WAN ACCELERATOR