Figure 15 IKE Security Algorithms Dialog Box

Use the drop-down menus to select the appropriate integrity algorithm, encryption algorithm, and Diffie-Hellman Group (these are equivalent to the -hash,-encryption, and -group arguments of the ipsec_config add ike command).

3.Click OK to return to the Key Exchange Security Methods dialog box. Click OK to return to the Key Exchange Settings dialog box.

Click Close to close the Policy Properties dialog box.

Step 9: Starting the IP Security Service

Use the following procedure to start the IP Security service. The IP Security service must be running before you can assign a policy.

1.From the Microsoft Start menu, select Control PanelAdministrative ToolsServices.

2.Scroll down and select IPSEC Services.

3.The Service manager opens the IPSEC Services Properties dialog box (Figure 16). In the Startup type selection menu, select Automatic.

If the Service status is not Started, click Start.

Click OK to close the IPSEC Services Properties dialog box. Close the Services dialog box.

Configuring a Windows Host-to-Host Policy 29