[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring an IPsec Policy—Quick Configuration (Standard VPNs)

You can use J-Web Quick Configuration to quickly configure an IPsec policy. (For information about configuring IPsec policies using the CLI editor or the standard J-Web configuration pages (not Quick Configuration pages), see Configuring an IPsec Policy (Standard and Dynamic VPNs).)

Before You Begin
For background information, read Virtual Private Networks (VPNs) Overview. Understanding IKE and IPsec Packet Processing. Configuring an IPsec Tunnel—Overview

Before You Begin

For background information, read

Figure 123 shows the quick configuration page where you can select an existing policy, or click Add to create a new one.

Figure 123: IPsec Policy Configuration

Image QC_ipsec_pol.gif

Figure 124 shows the quick configuration page where you create a new IPsec policy.

Figure 124: IPsec Policy Configuration

Image QC_ipsec_pol_add.gif

To configure an IPsec policy with Quick Configuration:

Select Configuration > Quick Configuration > VPN > IPsec Policy.
Select the IPsec Policy tab if it is not selected.
To use an existing policy, select one from among those listed and click one of the following buttons:
- To apply the configuration and stay on the Quick Configuration page, click Apply.
- To apply the configuration and return to the main Configuration page, click OK.
- To cancel your entries and return to the main page, click Cancel.
To configure a new IPsec policy, click Add.
Fill in the options as described in Table 110.
Click one of the following buttons:
- To apply the configuration, click OK.
- To cancel the configuration and return to the main Configuration page, click Cancel.

Table 110: IPsec Policy Configuration Options

Field	Function	Action
IPsec Policy
Name	Name of the IPsec policy.	Enter a name.
Description	Description of the policy.	Enter a text description.
Perfect Forward Secrecy	The method the device uses to generate the encryption key. PFS generates each new encryption key independently from the previous key. group1—Diffie-Hellman Group 1. group2—Diffie-Hellman Group 2. group5—Diffie-Hellman Group 5.	Select a method.
Proposal
None	Do not use a proposal.	Click None.
Predefined	A set of default Internet Key Exchange (IKE) proposals. basic—Basic set of two IKE proposals: Proposal 1—Preshared key, Data Encryption Standard (DES) encryption, and Diffie-Hellman Group 1 and Secure Hash Algorithm 1 (SHA-1) authentication Proposal 2—Preshared key, DES encryption, and Diffie-Hellman Group 1 and MD5 authentication compatible—Set of four commonly used IKE proposals: Proposal 1—Preshared key, triple DES (3DES) encryption, and G2 and SHA-1 authentication Proposal 2—Preshared key, 3DES, and Diffie-Hellman Group 2 and MD5 authentication Proposal 3—Preshared key, DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication Proposal 4—Preshared key, DES encryption, and Diffie-Hellman Group 2 and MD5 authentication standard—Standard set of two IKE proposals: Proposal 1— Preshared key, 3DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication Proposal 2—Preshared key, Advanced Encryption Standard (AES) 128-bit encryption, and Diffie-Hellman Group 2 and SHA-1 authentication	Click Predefined, and select one of the following options: basic predefined standard
User Defined	A list of proposals you previously defined.	Click User Defined and select proposals from the pop-up menu, then click Add.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]