Eicon Networks SHIVA 1100, Administrator'S Manual, Page: 87 / 136

IPSec
System Administrator’s Guide 87
Connection
Once a tunnel has been configured, an entry with the tunnel name in the Connection
field will be shown.
Note: You may modify a tunnel's settings by clicking on its connection name.
Click Connection to sort the tunnel list alphabetically by connection name.
Remote party
The Remote Party which the tunnel is configured to connect to will be defined either
by its Endpoint ID, IP Address or Distinguished Name.
Click Remote Party to sort the tunnel list by the remote party ID/name/address.
Status
Tunnels that use Automatic Keying (IKE) will have one of four states in the Status field.
The states include the following:
• Down indicates that the tunnel is not being negotiated. This may be due to the
following reasons:
• IPSec is disabled.
• The tunnel is disabled.
• The tunnel could not be loaded due to misconfiguration.
• Negotiating Phase 1 indicates that IPSec is negotiating Phase 1 to establish the
tunnel. Aggressive or Main mode packets (depending on tunnel configuration)
are transmitted during this stage of the negotiation process. Aggressive mode
must be set when dynamic addressing is used.