
Configuring IPsec Services
C-10
308630-15.1 Rev 00
Manual Protect and Unprotect SA Configuration
SAs specify which IPsec services are applied to the data packets traveling between
the security gateways. An individual SA protects data traveling in one direction. A
Protect SA applies IPsec services to outbound traffic; an Unprotect SA decrypts
and/or authenticates incoming data packets.
The examples in this section show how to manually configure both Protect and
Unprotect SAs. IKE provides automated SA configuration without requiring user
configuration.
For SA examples 1 and 2, refer to Figure C-3
; for SA example 3, refer to
Figure C-4
.
Figure C-3. Single Protect/Unprotect SA Pair
RTR1
RTR2
INET
S31 - 119.68.12.1
189.132.10.1 - S52
Internet
Comentarios a estos manuales