Avaya 3.7, Configuration Manual

Page: 144 / 326

Configuring VPN objects
144 Avaya VPNmanager Configuration Guide Release 3.7
Pre-Shared Secret
The Pre-Shared Secret area appears only when the VPN type is IKE with Preshared Secret
selected. The preshared secret appears in the Secret field as either ASCII or hexadecimal.
Select Modify Secret to change the preshared secret. Both the local and the remote security
gateway must have the identical preshared secrete text, or a secure tunnel cannot be
established between them.
Enter the secret character string, up to 64 hexadecimal characters or 16 ASCII characters.
Use Autogenerate to generate a random character sequence.
Select either ASCII or hexidecimal to display the secret.
Security (IPSec)
In IKE VPNs, VPN traffic flows in tunnel mode. Therefore, the Security (IPSec) tab is used for
configuring the parameters used for encapsulating the original packet (header and payload) into
the payload of an IPSec packet.
Packet-level security involves establishing an agreement between security gateways about
which IPSec protocol configurations to use. The Security (IPSec) tab has two sets of options.
The IPSec options control packet alteration, and the IPSec Proposal options are used for
creating up to four different proposals for payload encryption and authentication.
Security gateways must use the same IPSec Proposal. An IPSec Proposal dialog box is used
for creating different proposals in cases where the proposal is unknown.
Figure 48: VPN, Security (IPSec) Tab
In the IPSec area you set up the IPSec protocol information that you want the VPN to use