IBM System Storage TS3100, Setup, Operator, And Service Manual

Page: 164 / 375

Configure Library: IPSec
This page shows the current IPSec configuration of the library and allows
modification to the settings. Internet Protocol Security (IPSec) is a protocol suite for
securing Internet Protocol (IP) communications by authenticating and encrypting
each IP packet of a communication session. IPSec also includes protocols for
establishing mutual authentication between agents at the beginning of the session
and negotiation of cryptographic keys to be used during the session.
The following requirements are mandatory to use the USGv6 IPSec/IKE features:
v
IBM TS3100/TS3200 Tape library
v
Firmware Level that supports IPSec
v IPv6 network environment
v
Peer implementations of IPSec/IKEv2 for testing
– Linux
- IPSecTools
- StrongSwan/Racoon2
– VPN router or similar devices
Note: Due to the complexity of configuring IPSec do not enable IPSec, or change
the IPSec settings, unless you are being directed to do so by an IPSec
knowledgeable person who is familiar with the devices attached to your
network.
IPv6 needs to be enabled to use IPSec on TS3100/TS3200 libraries. If the protocol
stack doesn’t include IPv6 you cannot edit any related IPSec pages. To use IPSec,
on the Network page set the Protocol Stack to
Dual stack IPv4 + IPv6 or IPv6
only .
The IPSec Settings Page controls the generic behavior of the IPSec system and
contains the policy management.
1. Click IPsec in the left navigation pane to display the IPSec menu page.
5-54
TS3100 Tape Library and TS3200 Tape Library Setup, Operator, and Service Guide