Configuring ike key settings – Brocade Mobility 5181 Access Point Product Reference Guide (Supporting software release 4.4.0.0) User Manual

Page 171

Advertising
background image

Brocade Mobility 5181 Access Point Product Reference Guide

157

53-1002516-01

Configuring VPN tunnels

6

4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the Auto Key

Settings screen.

5. Click Cancel to return to the VPN screen without retaining the changes made to this screen.

Configuring IKE key settings

The Internet Key Exchange (IKE) is an IPsec standard protocol used to ensure security for VPN
negotiation and remote host or network access. IKE provides an automatic means of negotiation
and authentication for communication between two or more parties. In essence, IKE manages
IPSec keys automatically for the parties.

To configure IKE key settings for the Mobility 5181 Access Point:

1. Select Network Configuration -> WAN -> VPN from the Mobility 5181 Access Point menu tree.

2. Refer to the VPN Tunnel Config field, select the Auto (IKE) Key Exchange radio button and click

the IKE Settings button.

3. Configure the IKE Key Settings screen to modify the following:

ESP Encryption Algorithm

1

Use this menu to select the encryption and authentication
algorithms for this VPN tunnel.

1

DES - Selects the DES algorithm.No keys are required to be
manually provided.

1

3DES - Selects the 3DES algorithm. No keys are required to
be manually provided.

1

AES 128-bit: - Selects the Advanced Encryption Standard
algorithm with 128-bit. No keys are required to be manually
provided.

1

AES 192-bit: - Selects the Advanced Encryption Standard
algorithm with 192-bit. No keys are required to be manually
provided.

1

AES 256-bit: - Selects the Advanced Encryption Standard
algorithm with 256-bit. No keys are required to be manually
provided.

ESP Authentication
Algorithm

1

Use this menu to select the authentication algorithm to be
used with ESP. This menu is only active when ESP with
Authentication was selected for the ESP type.

1

MD5 - Enables the Message Digest 5 algorithm requiring
128-bit. No keys are required to be manually provided.

1

SHA1 - Enables Secure Hash Algorithm. No keys are required
to be manually provided.

Advertising