[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring an IPsec Policy—Quick Configuration

You can use J-Web Quick Configuration to quickly configure an IPsec policy.

Before You Begin
For background information, read Configuring an IKE Phase 1 Proposal—Quick Configuration.

Figure 95 shows the quick configuration page where you can select an existing policy, or click Add to create a new one.

Figure 95: IPsec Policy Configuration

Image QC_ipsec_pol.gif

Figure 96 shows the quick configuration page where you create a new IPsec policy.

Figure 96: IPsec Policy Configuration

Image QC_ipsec_pol_add.gif

To configure an IPsec policy with Quick Configuration:

Select Configuration > Quick Configuration > VPN > IPsec Policy.
Select the IPsec Policy tab if it is not selected.
To use an existing policy, select one from among those listed and click one of the following buttons:
- To apply the configuration and stay on the Quick Configuration page, click Apply.
- To apply the configuration and return to the main Configuration page, click OK.
- To cancel your entries and return to the main page, click Cancel.
To configure a new IPsec policy, click Add.
Fill in the options as described in Table 64.
Click one of the following buttons:
- To apply the configuration, click OK.
- To cancel the configuration and return to the main Configuration page, click Cancel.

Table 64: IPsec Policy Configuration Options

Field	Function	Action
IPsec Policy
Name	Name of the IPsec policy.	Enter a name.
Description	Description of the policy.	Enter a text description.
Perfect Forward Secrecy	The method the device uses to generate the encryption key. PFS generates each new encryption key independently from the previous key. group1—Diffie-Hellman Group 1. group2—Diffie-Hellman Group 2. group5—Diffie-Hellman Group 5.	Select a method.
Proposal
None	Do not use a proposal.	Click None.
Predefined	A set of default Internet Key Exchange (IKE) proposals. basic—Basic set of two IKE proposals: Proposal 1—Preshared key, Data Encryption Standard (DES) encryption, and Diffie-Hellman Group 1 and Secure Hash Algorithm 1 (SHA-1) authentication Proposal 2—Preshared key, DES encryption, and Diffie-Hellman Group 1 and MD5 authentication compatible—Set of four commonly used IKE proposals: Proposal 1—Preshared key, triple DES (3DES) encryption, and G2 and SHA-1 authentication Proposal 2—Preshared key, 3DES, and Diffie-Hellman Group 2 and MD5 authentication Proposal 3—Preshared key, DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication Proposal 4—Preshared key, DES encryption, and Diffie-Hellman Group 2 and MD5 authentication standard—Standard set of two IKE proposals: Proposal 1— Preshared key, 3DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication Proposal 2—Preshared key, Advanced Encryption Standard (AES) 128-bit encryption, and Diffie-Hellman Group 2 and SHA-1 authentication	Click Predefined, and select one of the following options: basic predefined standard
User Defined	A list of proposals you previously defined.	Click User Defined and select proposals from the pop-up menu, then click Add.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]