Version 5.2 215 September 2007
SIP User's Manual 5. Web-based Management
5. Click Create; a row is create in the IKE table
6. To save the changes to flash memory, refer to 'Saving Configuration' on page 256.
To delete a peer from the IKE table, select it from the ‘Policy Index’ drop-down list, click the
button Delete, and then click OK at the prompt.
The parameters described in the following table are used to configure the first phase (main
mode) of the IKE negotiation for a specific peer. A different set of parameters can be
configured for each of the 20 available peers.
Table 5-44: IKE Table Configuration Parameters
Parameter Name Description
Authentication Method
[IkePolicyAuthenticationM
ethod]
Determines the authentication method for IKE.
The valid authentication method values include:
 [0] Pre-shared Key (default)
 [1] RSA Signature
Notes:
 For pre-shared key based authentication, peers participating in an
IKE exchange must have a prior (out-of-band) knowledge of the
common key (see IKEPolicySharedKey parameter).
 For RSA signature based authentication, peers must be loaded with
a certificate signed by a common CA. For additional information on
certificates, refer to 'Server Certificate Replacement' on page 202.
Shared Key
[IKEPolicySharedKey]
Determines the pre-shared key (in textual format).
Both peers must register the same pre-shared key for the
authentication process to succeed.
Notes:
 The pre-shared key forms the basis of IPSec security and should
therefore be handled cautiously (in the same way as sensitive
passwords). It is not recommended to use the same pre-shared key
for several connections.
 Since the ini file is in plain text format, loading it to the gateway over
a secure network connection is recommended, preferably over a
direct crossed-cable connection from a management PC. For added
confidentiality, use the encoded ini file option (described in 'Secured
ini File' on page 267).
 After it is configured, the value of the pre-shared key cannot be
obtained via Embedded Web Server, ini file, or SNMP (refer the SIP
Series Reference Manual).
IKE SA LifeTime (sec)
[IKEPolicyLifeInSec]
Determines the time (in seconds) the SA negotiated in the first IKE
session (main mode) is valid. After the time expires, the SA is re-
negotiated.
The default value is 28800 (8 hours).
IKE SA LifeTime (KB)
[IKEPolicyLifeInKB]
Determines the lifetime (in kilobytes) the SA negotiated in the first IKE
session (main mode) is valid. After this size is reached, the SA is re-
negotiated.
The default value is 0 (this parameter is ignored).
To Next Page
Loading...
Need help?
General