AudioCodes Mediant 2000, User Manual

Page: 278 / 418

SIP User's Manual 278 Document #: LTRT-68808
Mediant 2000
Parameter Description
Format SPD_INDEX = IPSec
Mode
,
IPSec
PolicyRemoteIPAddress
, IPSec
PolicySrcPort
,
IPSec
PolicyDStPort
,IPSec
PolicyProtocol
,
IPSec
PolicyLifeInSec
, IPSec
PolicyLifeInKB
,
IPSec
PolicyProposalEncryption_X
,
IPSec
PolicyProposalAuthentication_X
,
IPSec
PolicyKeyExchangeMethodIndex
,
IPSec
PolicyLocalIPAddressType
,
IPSec
PolicyRemoteTunnelIPAddress
,
IPsec
PolicyRemoteSubnetMask
;
[\IPSEC_SPD_TABLE]
For example:
[IPSEC_SPD_TABLE]
Format SPD_INDEX = IPSecMode,
IPSecPolicyRemoteIPAddress, IpsecPolicySrcPort,
IPSecPolicyDStPort,IPSecPolicyProtocol, IPSecPolicyLifeInSec,
IPSecPolicyProposalEncryption_0,
IPSecPolicyProposalAuthentication_0,
IPSecPolicyProposalEncryption_1,
IPSecPolicyProposalAuthentication_1,
IPSecPolicyKeyExchangeMethodIndex,
IPSecPolicyLocalIPAddressType;
IPSEC_SPD_TABLE 0 = 0, 10.11.2.21, 0, 0, 17, 900, 1,2, 2,2 ,1,
0;
[\IPSEC_SPD_TABLE]
In the example above, all packets designated to IP address
10.11.2.21 that originate from the OAMP interface (regardless of
destination and source ports) and whose protocol is UDP are
encrypted. The IPSec SPD also defines an SA lifetime of 900
seconds and two security proposals (DES/SHA1 and
3DES/SHA1). IPsec is performed using the Transport mode.
Notes:
ƒ
Each row in the table refers to a different IP destination.
ƒ
To support more than one Encryption / Authentication
proposal, for each proposal specify the relevant parameters
in the Format line.
ƒ
The proposal list must be contiguous.
ƒ
To configure the IKE table using the Web interface, refer to
''Configuring the IPSec Table'' on page
114 .
ƒ
For an explanation on using
ini
file table parameters, refer to
''Structure of ini File Table Parameters'' on page 257 .
IKE Parameters
IPSec_IKEDB_Table
This
ini
file table parameter configures the IKE table. The format
of this parameter is as follows:
[IPSec_IKEDB_Table]
Format IKE_DB_INDEX = IKEPolicy
SharedKey
,
IKEPolicy
ProposalEncryption_X
,
IKEPolicy
ProposalAuthentication_X
,
IKEPolicy
ProposalDHGroup_X
, IKEPolicy
LifeInSec
,
IKEPolicy
LifeInKB
, IkePolicy
AuthenticationMethod
;
[\IPSEC_IKEDB_TABLE]
For example: