Avaya Configuring IPsec Services Manual de usuario Pagina 31
- Pagina / 122
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Overview of IPsec
308630-15.1 Rev 00
1-13
Figure 1-4. Security Associations for Bidirectional Traffic
Under most circumstances, you configure the IKE protocol to negotiate SAs
between security gateways automatically. You can also manually configure SAs.
How IKE Negotiates Security Associations
The IKE protocol automates the process of IPsec SA configuration by creating an
IKE SA for Protect SA and Unprotect SA negotiation. Each IKE peer sends IPsec
SA parameter negotiation information in a secure IKE packet. The peers generate
keys based on the agreed parameters and then verify each other’s identity. After
this verification is done, the IPsec SA is established.
The IKE protocol itself is secured through an IKE SA created using the
Diffie-Hellman algorithm (Oakley) to determine the key, and the authentication
methods described in “
Automated Security Associations Using IKE” on page
1-11. The Nortel Networks implementation uses a preshared key.
Security Parameter Index
A security parameter index (SPI) is an arbitrary but unique 32-bit (4-byte) value
that, when combined with the IP destination address and the numeric value of the
security protocol used (ESP), uniquely identifies the SA for a data packet.
IPsec discards an incoming ESP packet if the SPI does not match any SA in the
inbound security associations database (SAD).
IP0079A
Network
Security gateway Security gateway
132.245.145.195
132.245.145.205
Protect SA
Source: 132.245.145.205
Destination: 132.245.145.195
Protect SA
Source: 132.245.145.195
Destination: 132.245.145.205
Unprotect SA
Source: 132.245.145.205
Destination: 132.245.145.195
Unprotect SA
Source: 132.245.145.195
Destination: 132.245.145.205
- Configuring IPsec Services 1
- Trademarks 2
- Restricted Rights Legend 2
- Statement of Conditions 2
- Contents 5
- 308630-15.1 Rev 00 vii 7
- 308630-15.1 Rev 00 ix 9
- 308630-15.1 Rev 00 xi 11
- Before You Begin 13
- Text Conventions 14
- Acronyms 15
- Hard-Copy Technical Manuals 16
- How to Get Help 17
- Chapter 1 19
- Overview of IPsec 19
- About IPsec 20
- Supported Routers 21
- Supported WAN Protocols 21
- IPsec Services 22
- How IPsec Works 23
- IPsec Tunnel Mode 24
- IPsec Elements 25
- Security Gateways 26
- Security Policies 26
- Security Associations 29
- Security Protocols 33
- Performance Considerations 35
- Chapter 2 37
- Installing IPsec 37
- Installing the IPsec Software 38
- Securing Your Site 40
- Securing Your Configuration 40
- Creating and Using NPKs 41
- Caution: 42
- Changing an NPK 43
- Monitoring NPKs 44
- Chapter 3 45
- Starting IPsec 45
- Creating Policies 46
- Specifying an Action 47
- Policy Considerations 47
- (continued) 48
- Automated SA Creation 51
- About Manual SA Creation 53
- Chapter 4 57
- Customizing IPsec 57
- Editing a Policy 58
- Adding a Policy 59
- Reordering Policies 62
- Modifying Automated SAs (IKE) 64
- Modifying Manual SAs 65
- Disabling IPsec 67
- Appendix A 69
- Site Manager Parameters 69
- Node Protection Key Parameter 70
- IPsec Parameters 71
- IPsec Policy Parameters 72
- Appendix B 81
- Definitions of k Commands 81
- Appendix C 83
- Configuration Examples 83
- 192.32.10.0 85
- 192.32.20.0 86
- Manual SA Policy Examples 87
- RTR1 92
- RTR2 92
- RTR3 95
- RTR4 95
- Appendix D 99
- IPsec Terminology 100
- Configuration Considerations 101
- Feature Comparison Summary 102
- 308630-15.1 Rev 00 103
- BayRS Tools 104
- Contivity Tools 104
- Symptoms You May See 105
- Protocol Numbers 107
- Appendix E 107
Relacionado con productos y manuales para Manuales de software Avaya Configuring IPsec Services
Manuales de software Avaya DMC DECT Fundamentals - Communications Server 1000 Manual de usuario
(340 paginas)
(340 paginas)
Manuales de software Avaya Configuring SNMP, BOOTP, DHCP, and RARP Services Manual de usuario
(108 paginas)
(108 paginas)
Manuales de software Avaya Nortel Business Communications Manager 450 1.0 Unified Messaging Guía de configuración
(80 paginas)
(80 paginas)
Manuales de software Avaya Configuring Interface and Router Redundancy Manual de usuario
(72 paginas)
(72 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.036 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales