Avaya Configuring Integrated IP Security Manual de usuario descargar pdf (Pagina 43)

Configuring IPsec

304111-A Rev 00

3-7

When you use Site Manager to configure IPsec on an interface for the first time,

configure the menu items displayed in the IPsec Configuration for Interface

window in sequence, starting with the top item, Outbound Policies. You must set

an outbound policy for an IP interface before you can link a security association

(SA) to it.

Creating Policies

You create inbound and outbound policies for an IP interface by using a policy

template. A policy template is a policy definition that you create. You can use a

policy template on any IP interface.

Each template contains a complete policy specification (criteria, range, and

action) for the interface. This means that each policy itself is completely specified

by the template. You can modify an individual policy to fit the needs of a specific

interface, as long as the values in the policy comply with the policy template

specifications. For example, an IP source address value must be in the range

specified in the policy template.

Criteria Specifications

The criteria determine the portion of a packet header (IP source address, IP

destination address, protocol number) that is examined by IPsec. For each

criterion, you must specify a range of values. The range represents the actual

criteria values (IP addresses that are compared to the address of a packet).

Action Specifications

The action specification in a policy controls how a packet that matches the

specified criteria (and criteria range) is processed. You decide how you want

packets to be processed and apply a policy to implement your decision.

With IPsec, a packet can be processed in one of three ways:

• The packet can be dropped.

• The packet can be transmitted or received without alteration.

• The packet can be protected. In this case, a security association (SA)

is linked to the policy.

1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 71 72

Sin comentarios

Avaya Configuring Integrated IP Security Manual de usuario Pagina 43