IBM System Storage TS3100, Setup, Operator, And Service Manual

Page: 166 / 375

Table 5-13. Generic IPSec settings (continued)
Setting Available Values Comments
Neighborhood Solicitation/
Neighborhood Advertisment bypass
policies enabled
v Enable
v Disable
Enables predefined policies for the
NS/NA messages to be bypassed.
This allows initial IKE phases in case
of all protocol securing policies,
which would normally discard this
message type if no SA is established.
3. Figure 5-48 shows the IPSec maintenance main controls.
a. New
creates a new policy. Up to 4 policies can be created.
b. Delete deletes the selected policy.
c.
Disable disables the selected policy. If it is already enabled a click will
disable it.
d. View/Modify loads the selected policy to view or modify.
e. Up/Down allows reordering of the selected policy. Policies are processed in
the order as shown. Reordering of policies changes the processing priority.
4. Policies are processed in the order they appear on the policy list. This order is
very important in case multiple policies are in use. The first matching policy
will process the packet.
v
One policy matches the packet, and is selected.
v
Multiple policies might match. In this case, the first matching policy is
selected.
v No policies might match, then the default policy is used.
5.
The Policy Editing section is divided into four parts:
v General settings
v
Internet Key Exchange (IKE) settings
v Security Association settings
v
Refresh/Submit/Cancel button
a77ug285
Figure 5-48. IPSec Policy Editing
5-56
TS3100 Tape Library and TS3200 Tape Library Setup, Operator, and Service Guide
|