Adding an ipsec selector – Dell POWEREDGE M1000E User Manual

Page 267

Advertising
background image

Web Tools Administrator’s Guide

239

53-1001772-01

IPsec over management ports

17

DRAFT: BROCADE CONFIDENTIAL

Process indicates a data packet is processed using IPsec encryption, IKE authentication, or
both, using encapsulation security protocol (ESP) processing, or authentication header (AH)
protocol processing.

Use the following procedure to add an IPsec transform policy.

1. Select the Transforms tab.

The Transforms screen displays.

2. Select Add.

The Add Transform dialog box displays.

3. Enter a name in the Transform Name field.

4. Select the IPsec Mode.

The choices are Transport or Tunnel.

5. Enter the SA Proposal name.

6. Select the IPsec Protection Type option.

7. Select the IKE Policy Name option.

IKE policies need to be created before adding a transform policy. If there are no names to
select from, you must create an IKE policy.

8. Optional: Enter a local and peer IP address.

9. Click OK.

Adding an IPsec selector

Selectors are used to apply transform policies to an IP flow. Flows are uni-directional. Selectors are
associated with a specific source IP address, a specific peer IP address, and a specific transform.

1. Select the Selectors tab.

The Selectors screen displays.

2. Select Add.

The Add Selector dialog box displays.

3. Enter a name in the Selector Name field.

4. Select the Traffic Flow Direction (in or out).

IPsec policies are unidirectional, and must be applied separately to inbound and outbound
flows.

5. Enter the IP address of the sender in the Source IP Address field.

6. Enter the IP address of the receiver in the Peer IP Address field.

7. Enter the Transform Name value.

8. The Protocol Name selector allows you to select a specific protocol.

9. Click OK.

Advertising