H3C Technologies H3C Intelligent Management Center User Manual
Page 138
128
b.
Enter the complete name or part of the name of the IPsec proposal template you want to query,
and click Query.
c.
Select the IPsec proposal template in the IPsec Proposal List.
d.
Click OK.
The parameters in the IPsec proposal template are automatically filled in the IPsec proposal
configuration page.
e.
Go to step 6.
5.
Import an IPsec proposal that has been configured on a hub device in the current VPN domain:
a.
Click the import icon
next to the hub proposal name.
The Select IPsec Proposals window appears. This window lists the IPsec proposals configured
on the hub devices in the current domain, except those do not match the Encapsulation mode
Configuring default IPsec and IKE settings
."
b.
Enter the complete name or part of the name of the IPsec proposal you want to query, and click
Query.
c.
Select the IPsec proposal in the IPsec Proposal List.
d.
Click OK.
The parameters in the IPsec proposal are automatically filled in the IPsec proposal
configuration page.
e.
Go to step 6.
6.
Click OK.
The Encapsulation mode is inherited from the VPN domain, and cannot be modified when you
configure the IPsec proposal.
To configure an IKE proposal for the tunnel:
1.
Click Add in the IKE Proposal area.
2.
Enter proposal numbers for Hub Proposal No. and Hub Proposal No..
Use one of the following methods to configure an IKE proposal:
{
Configure an IKE proposal manually through step 3.
{
Import an IKE proposal template through step 4.
{
Import an IKE proposal that has been configured on a hub device in the current VPN domain
through step 5.
3.
Configure an IKE proposal manually:
a.
Select DES, 3DES, AES(128), AES(192), or AES(256) from the Encryption Algorithm list.
b.
Select MD5 or SHA1 from the Authentication Algorithm list
c.
Select DH Group 1, DH Group 2, DH Group 5, or DH Group 14 from the DH Group ID list.
d.
Enter the ISAKMP SA lifetime in seconds in the ISAKMP SA Life Time box.
e.
.Go to step 6.
4.
Import an IKE proposal template:
a.
Click the import icon
next to the hub proposal number.
The Select IKE Proposals window appears. This window automatically filters IKE proposal
templates that do not match the IKE Authentication method set in "
."