Ipsec, Ike phase 1 proposals esp phase 2 proposals, Field descriptions – Perle Systems IOLAN SCS User Manual

Page 222

Advertising
background image

VPN

222

IOLAN SDS/SCS/STS User’s Guide, Version 3.6

IKE Phase 1 Proposals

The following IKE Phase 1 proposals are supported by the IOLAN VPN gateway:

z

Ciphers—3DES, AES

z

Hashes—MD5, SHA1

z

Diffie-Hellman Groups—2 (MODP1024), 5 (MODP1536), 14 (MODP2048), 15 (MODP3072),
16 (MODP4096), 17 (MODP6144), 18 (MODP8192)

ESP Phase 2 Proposals

The following ESP Phase 2 proposals are supported by the IOLAN VPN gateway:

z

Ciphers—3DES, AES

z

Authentication Algorithms—MD5, SHA1, SHA2

IPsec

When an IPsec tunnel becomes active, you are requiring that all access to the IOLAN go through the
configured IPsec tunnel(s), so you must configure any exceptions first (see

Exceptions on page 228

for more information on exceptions) or you will not be able to access the IOLAN through the
network unless you are configured to go through the IPsec tunnel (you can still access the IOLAN
through the Console port).

Field Descriptions

The following buttons are available:

Add Button

Click this button to add a new IPsec VPN tunnel.

Edit Button

Select an existing IPsec VPN tunnel to edit the tunnel’s parameters.

Delete Button

Select an existing IPsec VPN tunnel to remove the tunnel.

Advertising