Configure
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
195
Alcatel-Lucent
Beta
Beta
OmniAccess 5740 Unified Services Gateway Web GUI Users Guide
Figure 117: VPN IPSec: IPSec Wizard - IKE Settings
1.
By default,
Use Default IKE Policy
check box is enabled.
An IKE policy ‘
default
’ is created in your system. If an IKE policy is not
configured, the ‘default’
IKE policy
is applied to the IPSec profile. Following
are the default values for the ‘default’ IKE policy:
•
Default proposal in IKE policy:
md5-des
•
Default PFS group in IKE policy:
pfs group2
•
Default IPSec security-association lifetime in seconds:
28800
•
Default IKE lifetime in seconds:
86400
Retain the default values or configure as required.
2.
Configure IKE setting as required. To do the same, uncheck the
Use Default IKE
Policy
check box.
•
Here you have two options: Configure a new IKE policy or use an already
created IKE Policy.
Configure New IKE Policy
i. Enter the name for IKE policy in the
IKE Policy Name
field.
ii. Select the predefined PFS group in
PFS
drop-down list.
iii. Enter the lifetime for the IKE policy in
Lifetime
(seconds) field.
iv. Enter the IPSec SA lifetime in the
IPSec SA Lifetime
(seconds)
and
IPSec SA Lifetime (KB)
field.
