IBM System Storage TS3100, Setup, Operator, And Service Manual

Page: 172 / 375

Table 5-15. IKE settings (continued)
Name of setting Available Values Comments
Host Authentication ID
v All
v IPv6 Address
v FQDN
v E-Mail-Address
ID value which is compared against
the peer ID.
v All
Any peer ID will be accepted.
v IPv6 Address
Peer IP address is compared.
v FQDN
Peers FQDN ID is compared.
v
E-Mail Address
Peers E-Mail Address will be
compared.
8. Certificate Upload
The file selection box appears under the IPsec page, and it is available even
before a new policy is created.
9. Security Association Settings
The Security Association settings define the parameter and algorithms for the
Security Association (SA) used in an IPSec session in case the associated
policy is used. In case IKE is not used these settings have to be exactly the
same as on the peer side. In case of IKE only the AH/ESP selection and the
algorithms are needed.
Table 5-16. Security Association settings
Name of setting Available Values Comments
Enable AH checked/unchecked AH (Authentication Header) mode
activation
Enable ESP checked/unchecked ESP (Encapsulation Security Payload)
mode activation
a77ug296
Figure 5-53. Certificate Upload
a77ug297
Figure 5-54. Security Association settings
5-62
TS3100 Tape Library and TS3200 Tape Library Setup, Operator, and Service Guide
|
|
|
|
|
|
|
|
|
|
|