Siemens BUSINESS CLASS 5935 Manuel d'utilisateur télécharger pdf (Page 81)

SIEMENS 5930/5935 Business Gateway

User’s Guide

Chapter 6 Security Setup

IKE/IPSec Configuration

SIEMENS 75

IKE Proposals Definition

IKE I proposals specify how packets will be encrypted/authenticated for Phase I. To define a new IKE proposal:

1. Click Create next to IKE Proposals from the Advanced IKE/IPSec Setup page. This displays the IKE

Proposal Definition page.

2. In IKE Proposal Name, enter a logical name for the IKE Proposal Definition. This name is of no

importance to the remote IKE peer.

3. From the Message Authentication Scheme drop-down menu, select one of the following hashing

(authentication) options to use to validate IKE Phase I exchange:

• MD5: Performs message authentication using Message Digest 5.

• SHA1: Performs message authentication using Secure Hashing Algorithm 1 (default).

4. From the Diffie-Hellman (Oakley) Group drop-down menu, select one of the following Diffie-Hellman key

generation groups to use during IKE Phase I exchange:

• Group 1: Uses Diffie-Hellman Group 1 (768 bits).

• Group 2: Uses Diffie-Hellman Group 2 (1024 bits).

5. From the Encryption Type drop-down menu, select one of the following encryption types to use during

IKE Phase II (Quick Mode) exchange:

• DES: Encrypts using a 56-bit key.

• 3DES: Encrypts using three 56-bit keys to produce 168-bit encryption.

6. In Phase I Proposal Lifetime, enter the number of seconds after which the Phase I negotiation expires.

The default is 1800 seconds. Once this time is elapsed, the system will renegotiate the IKE connection.

7. Click Apply.

1 2 ... 76 77 78 79 80 81 82 83 84 85 86 ... 93 94

Pas de commentaire

Siemens BUSINESS CLASS 5935 Manuel d'utilisateur Page 81