Configuring an IPSec Policy—Quick Configuration

You can use J-Web Quick Configuration to quickly configure an IPSec policy.

Before You Begin

For background information, read Configuring an IKE Phase 1 Proposal—Quick Configuration

To configure an IPSec policy with Quick Configuration:

Select Configuration > Quick Configuration > VPN > IPSec Policy.
The figure below shows the quick configuration page where you can select an existing policy, or click Add to create a new one.

Figure 61: IPSec Policy Configuration
Select the IPSec Policy tab if it is not selected.
To use an existing policy, select one from among those listed and click one of the following buttons:
- To apply the configuration and stay on the Quick Configuration page, click Apply.
- To apply the configuration and return to the main Configuration page, click OK.
- To cancel your entries and return to the main page, click Cancel.
To configure a new IPSec policy, click Add.
The figure below shows the quick configuration page where you create a new IPSec policy.

Figure 62: IPSec Policy Configuration
Fill in the options as described in the table below.
Click one of the following buttons:
- To apply the configuration, click OK.
- To cancel the configuration and return to the main Configuration page, click Cancel.

Table 127: IPSec Policy Configuration Options

Field	Function	Action
IPSec Policy
Name	Name of the IPSec policy.	Enter a name.
Description	Description of the policy.	Enter a text description.
Perfect Forward Secrecy	The method the router uses to generate the encryption key. PFS generates each new encryption key independently from the previous key. group1—Diffie-Hellman Group 1. group2—Diffie-Hellman Group 2. group5—Diffie-Hellman Group 5.	Select a method.
Proposal
None	Do not use a proposal.	Click None.
Predefined	A set of default Internet Key Exchange (IKE) proposals. basic—Basic set of two IKE proposals: Proposal 1—Preshared key, Data Encryption Standard (DES) encryption, and Diffie-Hellman Group 1 and Secure Hash Algorithm 1 (SHA-1) authentication Proposal 2—Preshared key, DES encryption, and Diffie-Hellman Group 1 and MD5 authentication compatible—Set of four commonly used IKE proposals: Proposal 1—Preshared key, triple DES (3DES) encryption, and G2 and SHA-1 authentication Proposal 2—Preshared key, 3DES, and Diffie-Hellman Group 2 and MD5 authentication Proposal 3—Preshared key, DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication Proposal 4—Preshared key, DES encryption, and Diffie-Hellman Group 2 and MD5 authentication standard—Standard set of two IKE proposals: Proposal 1— Preshared key, 3DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication Proposal 2—Preshared key, Advanced Encryption Standard (AES) 128-bit encryption, and Diffie-Hellman Group 2 and SHA-1 authentication	Click Predefined, and select one of the following options: basic predefined standard
User Defined	A list of proposals you previously defined.	Click User Defined and select proposals from the pop-up menu, then click Add.

[Prev][Next][Report an Error]