H3C Technologies H3C Intelligent Management Center - Manual (Page 54)

44
7. To delete IPsec proposals, select the IPsec proposals, click Delete, and then click OK on the
confirmation dialog box that appears.
8. To add an IKE proposal:
a. Click Add in the IKE Proposal area.
The IKE Proposal dialog box appears.
b. Configure the following parameters for the IKE proposal:
− Proposal Num.—Enter the IKE proposal number. When negotiating the ISAKMP SA, the IKE
peers match the IKE proposals by their proposal number, and picks the matching proposal
with the smallest number.
− IKE Authentication—Select the authentication method used by the IKE peers for identity
authentication, Pre-Shared Key or CA Authentication.
− Encryption Algorithm—Select the encryption algorithm. Options are DES, 3DES, AES(128),
AES(192), and AES(256).
− Authentication Algorithm—Select the authentication algorithm. Options are MD5 and
SHA1.
− DH Group ID—Select the DH group ID. Options are DH Group 1, DH Group 2, DH Group
5, and DH Group 14.
− ISAKMP SA Lifetime—Specify the ISAKMP SA lifetime, in seconds.
c. Click OK.
9. To modify an IKE proposal, click the Modify icon for the IKE proposal and modify all the
parameters except for the proposal number.
10. To delete IKE proposals, select the IKE proposals, click Delete, and then click OK on the
confirmation dialog box that appears.
11. Click OK.
CAUTION:
Do not change the security level of the DVPN security configuration while you are modifying it. Otherwise,
you lose all your modifications.
Configuring IVM service parameters
IVM service parameters include BIMS service parameters, BIMS device parameters, and monitor
settings.
• BIMS service parameters—Contains BIMS server host parameters. IVM uses the settings to connect
to the BIMS component and obtain information about the spoke devices (CPE devices in BIMS).
• BIMS device parameters—Contains SNMP, Telnet, and SSH configuration settings can be applied
to spoke devices managed by BIMS. After a corporation's headquarters has established tunnels
with its branch offices, it can centrally manage and monitor the spoke devices located at the branch
offices through the IMC Platform.
• Monitor settings—Contains IPsec tunnel and IKE tunnel monitor indexes.
Modifying BIMS server parameters
1. Click the Service tab.