H3C Technologies H3C Intelligent Management Center - Manual (Page 45)

35
Viewing the IPsec proposal details
1. Click the Service tab.
2. From the navigation tree, select IPsec VPN Manager > Security Proposals > IPsec Proposals. The
IPsec Proposal List displays all IPsec proposals.
3. Click the name of the IPsec proposal whose detailed information you want to view.
IPsec proposal details contents
{
Name—IPsec proposal name.
{
Encapsulation Mode—Encapsulation mode of the IPsec packets, Transport or Tunnel.
{
Security Protocols—Security protocols used in encapsulating IPsec packets. Options are AH,
ESP, and AH+ESP.
{
AH Authentication—AH authentication algorithm used by the IPsec packets when the security
protocol is AH or AH+ESP. This field displays MD5 or SHA-1.
{
ESP Authentication—ESP authentication algorithm used by the IPsec packets when the security
protocol is ESP or AH+ESP. This field displays MD5 or SHA-1.
{
ESP Encryption—ESP encryption algorithm used by the IPsec packets when the security protocol
is ESP or AH+ESP. This field displays DES, 3DES, AES(128), AES(192), AES(256), or None.
{
Comments—Description of the IPsec proposal.
4. Click Back to go back to the IPsec Proposal List.
Adding an IPsec proposal
1. Click the Service tab.
2. From the navigation tree, select IPsec VPN Manager > Security Proposals > IPsec Proposals. The
IPsec Proposal List displays all IPsec proposals.
3. Click Add. The Add IPsec Proposal page appears.
{
Name—Enter the IPsec proposal name.
{
Encapsulation Mode—Select Transport or Tunnel as the packet encapsulation mode.
{
Security Proposals—Select the security protocols used by the IPsec proposal. Options are AH,
ESP, and AH+ESP.
{
AH Authentication—This field appears only when AH or AH+ESP is selected for Security
Protocols. Select the AH authentication algorithm used by the IPsec packets. Options are MD5
and SHA-1.
{
ESP Authentication—This field appears only when ESP or AH+ESP is selected for Security
Protocols. Select the ESP authentication algorithm used by the IPsec packets. Options are MD5,
SHA-1, and None.
{
ESP Encryption—This field appears only when ESP or AH+ESP is selected for Security Protocols.
Select the ESP authentication algorithm used by the IPsec packets. Options are DES, 3DES,
AES(128), AES(192), AES(256), and None.
{
Comments—Enter a description of the IPsec proposal.
4. Click OK.
The newly added IPsec proposal is saved in IVM and can be referenced by security policies.