
Configuring IPsec Services
3-10
308630-15.1 Rev 00
For examples of how to configure manual SAs, see “Manual Protect and
Unprotect SA Configuration” on page C-10.
Creating a Protect SA Manually
To create a Protect SA manually, complete the following tasks:
Note:
You must configure manual SAs to encrypt, authenticate, or both. Site
Manager does not allow you to create an SA if both the Cipher Algorithm and
the Integrity Algorithm parameters are set to None.
Site Manager Procedure
You do this System responds
1. In the IPsec Configuration for Interface
window, click on
Manual
Protect SA
.
The Protect SA List for Interface window
opens.
2. Click on
Add
. The IPsec Manual Protect SA window
opens.
3. Set the following parameters:
• SA Source IP Address
• SA Destination IP Address
• Security Parameter Index
• Cipher Algorithm
• Cipher Key Length
• Cipher Key (8 Byte Hex)
• Integrity Algorithm
• Integrity Key (16 Byte Hex)
Position the cursor in a field and click on
Values
to display a menu of valid options,
if applicable.
Click on
Help
, or see the parameter
descriptions beginning on page A-5
for
more information.
4. Click on
OK
. You return to the Protect SA List for
Interface window.
5. Repeat steps 2 through 4 to create
additional Protect SAs, if necessary. Click
on
Done
when you are finished.
You return to the IPsec Configuration for
Interface window.
Commentaires sur ces manuels