[Prev][Next][Report an Error]

Configuring an IPsec Policy—Quick Configuration

You can use J-Web Quick Configuration to quickly configure an IPsec policy.

Figure 69 shows the quick configuration page where you can select an existing policy, or click Add to create a new one.

Figure 69: IPsec Policy Configuration

IPsec Policy Configuration

 

Figure 70 shows the quick configuration page where you create a new IPsec policy.

Figure 70: IPsec Policy Configuration

IPsec Policy Configuration

To configure an IPsec policy with Quick Configuration:

  1. Select Configuration > Quick Configuration > VPN > IPsec Policy.
  2. Select the IPsec Policy tab if it is not selected.
  3. To use an existing policy, select one from among those listed and click one of the following buttons:
  4. To configure a new IPsec policy, click Add.
  5. Fill in the options as described in Table 143.
  6. Click one of the following buttons:

Table 143: IPsec Policy Configuration Options

Field

Function

Action

IPsec Policy

Name

Name of the IPsec policy.

Enter a name.

Description

Description of the policy.

Enter a text description.

Perfect Forward Secrecy

The method the device uses to generate the encryption key. PFS generates each new encryption key independently from the previous key.

  • group1—Diffie-Hellman Group 1.
  • group2—Diffie-Hellman Group 2.
  • group5—Diffie-Hellman Group 5.

Select a method.

Proposal

None

Do not use a proposal.

Click None.

Predefined

A set of default Internet Key Exchange (IKE) proposals.

  • basic—Basic set of two IKE proposals:
    • Proposal 1—Preshared key, Data Encryption Standard (DES) encryption, and Diffie-Hellman Group 1 and Secure Hash Algorithm 1 (SHA-1) authentication
    • Proposal 2—Preshared key, DES encryption, and Diffie-Hellman Group 1 and MD5 authentication
  • compatible—Set of four commonly used IKE proposals:
    • Proposal 1—Preshared key, triple DES (3DES) encryption, and G2 and SHA-1 authentication
    • Proposal 2—Preshared key, 3DES, and Diffie-Hellman Group 2 and MD5 authentication
    • Proposal 3—Preshared key, DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication
    • Proposal 4—Preshared key, DES encryption, and Diffie-Hellman Group 2 and MD5 authentication
  • standard—Standard set of two IKE proposals:
    • Proposal 1— Preshared key, 3DES encryption, and Diffie-Hellman Group 2 and SHA-1 authentication
    • Proposal 2—Preshared key, Advanced Encryption Standard (AES) 128-bit encryption, and Diffie-Hellman Group 2 and SHA-1 authentication

Click Predefined, and select one of the following options:

  • basic
  • predefined
  • standard

User Defined

A list of proposals you previously defined.

Click User Defined and select proposals from the pop-up menu, then click Add.


[Prev][Next][Report an Error]