Ivm features – H3C Technologies H3C Intelligent Management Center User Manual
Page 12
2
•
IPsec proposal management—Manages IPsec proposals that define security parameters for IPsec
SA negotiation, including the security protocol, encryption algorithm, and authentication algorithm.
•
IKE proposal management—Manages IKE proposals that define IKE negotiation attributes for
secure communication.
•
DVPN security configuration management—IVM provides three security levels to define VAM and
IPsec security parameters for DVPNs.
•
IVM service parameter settings—To work with BIMS, IVM allows operators to configure BIMS
service and device parameters for monitoring. With the configuration, IVM can obtain IPsec
monitor index data from BIMS devices.
•
Tunnel and VPN domain monitoring—IVM monitors and collects index data about tunnels and
VPN domains, and displays their operating status in monitor diagrams.
•
VPN domain topology display—IVM displays VPN logical structures according to the VPN domain
configuration and IPsec device status. Operators can easily monitor VPN status and locate
problems on the VPN domain topology.
•
IVM report management—IVM provides a variety of real-time and periodic report templates.
Operators can view generated reports in IVM or sends them out in emails.
IVM features
IVM has the following features that can reduce workload and improve configuration efficiency:
•
Flexible configuration—With IVM, operators can easily deploy tunnel configurations to IPsec
devices, or remove the deployed tunnel configurations from IPsec devices as needed.
•
Monitoring and statistics—IVM monitors the tunnel operating status for VPN domains and displays
statistics in diagrams.
•
Configuration templates—IVM simplifies the VPN domain configuration process by automatically
loading parameters from configuration templates. IVM includes the following templates: IPsec
proposals, IKE proposals, and DVPN security configurations.
•
Working with BIMS—In a network that include the headquarters and branches, IVM can work with
BIMS to deploy VPN to branch networks.