Avaya Configuring IPsec Services Manual de usuario descargar pdf (Pagina 96)

Configuring IPsec Services

C-12

308630-14.00 Rev 00

SA Example 3: Configuring Multiple Protect/Unprotect SA Pairs

In this example, multiple Protect/Unprotect SA pairs are configured between

RTR1 and RTR2, RTR3, and RTR4.

• The SA pair between RTR1 and RTR2 uses DES56 and HMAC MD5.

• The SA pair between RTR1 and RTR3 uses only HMAC MD5.

• The SA pair between RTR1 and RTR4 uses only DES56.

As you review the tables in this example, refer to Figure C-4

Figure C-4. Multiple Protect/Unprotect SA Pairs

RTR1

INET

S31 - 119.68.12.1

RTR3

129.43.12.19 - S28

RTR2

189.132.10.1 - S52

RTR4

192.32.1.5 - S33

1 2 ... 91 92 93 94 95 96 97 98 99 100 101 ... 121 122

Configuring IPsec Services 1
Trademarks 2
Restricted Rights Legend 2
Statement of Conditions 2
Contents 7
308630-14.00 Rev 00 ix 9
308630-14.00 Rev 00 xi 11
308630-14.00 Rev 00 xiii 13
Before You Begin 15
Text Conventions 16
Acronyms 17
Hard-Copy Technical Manuals 19
How to Get Help 19
Chapter 1 21
Overview of IPsec 21
About IPsec 22
Note Regarding IPsec and NAT 22
Supported Routers 23
Supported WAN Protocols 23
IPsec Services 24
How IPsec Works 25
IPsec Tunnel Mode 26
IPsec Elements 27
Security Gateways 28
Security Policies 28
Security Associations 31
Security Protocols 35
Authentication Header 36
Perfect Forward Secrecy 37
Chapter 2 39
Installing IPsec 39
Upgrading Router Software 40
Installing the IPsec Software 40
308630-14.00 Rev 00 41
Securing Your Site 42
Securing Your Configuration 42
Random Number Generator (RNG) 43
Generating NPKs 43
Caution: 44
Changing an NPK 46
Monitoring NPKs 46
Chapter 3 47
Starting IPsec 47
Creating Policies 48
Specifying an Action 49
Policy Considerations 49
Creating an Outbound Policy 50
Creating an Inbound Policy 52
About Automated SA Creation 54
About Manual SA Creation 56
Chapter 4 59
Customizing IPsec 59
Editing a Policy 60
Adding a Policy 61
Frame Relay Protocol 62
Reordering Policies 64
Frame Relay 65
Manual SA Modifications 67
Disabling IPsec 69
Appendix A 71
Site Manager Parameters 71
Enabling IPsec Parameters 72
IPsec Policy Parameters 73
Appendix B 83
Definitions of k Commands 83
Appendix C 85
RTR4 Subnet 192.32.30.0 88
Manual SA Policy Examples 89
RTR1 and RTR2 92
RTR1 93
RTR2 93
RTR3 96
RTR4 96
Supported Versions 100
Configuring Through a Browser 100
Terminology 101
Configuration Specifics 102
Feature Comparison Summary 103
Troubleshooting Tips 104
Configuration Examples 105
Protocol Numbers 109
Appendix D 109

Comentarios a estos manuales

Sin comentarios

Avaya Configuring IPsec Services Manual de usuario Pagina 96

Comentarios a estos manuales

Relacionado con productos y manuales para Software Avaya Configuring IPsec Services