Motorola WiNG 4.4, Reference Manual

Page: 421 / 598

Switch Security 6 - 69
b. Refer to the Status field for the state of the requests made from applet. This field displays error messages if
something goes wrong in the transaction between the applet and the switch.
c. Click OK to use the changes to the running configuration and close the dialog.
d. Click Cancel to close the dialog without committing updates to the running configuration.
6.6.3 Viewing SA Statistics
A security association (SA) is a description of how two peers employ a security to interoperate securely. IKE requires SAs
to identify connection attributes. IKE can negotiate and establish its own SA. An IKE SA is used by IKE only, and is bi-
directional.
To view SA statistics:
1. Select Security > IKE Settings from the main menu tree.
2. Click the SA Statistics tab.
Hash Value Define the hash algorithm used to ensure data integrity. The hash value validates a packet comes
from its intended source and has not been modified in transit. Options include:
• SHA - The default value.
• MD5 - MD5 has a smaller digest and is somewhat faster than SHA-1.
Authentication
Type Set the authentication scheme used to validate the identity of each peer. Pre-shared keys do not
scale accurately with a growing network but are easier to maintain in a small network. Options
include:
• Pre-shared Key - Uses pre-shared keys.
• RSA Signature - Uses a digital certificate with keys generated by the RSA signatures algorithm.
SA Lifetime Define an integer for the SA lifetime. With longer lifetimes, security defines future IPSec security
associations quickly. Encryption strength is great enough to ensure security without using fast
rekey times. Motorola Solutions recommends using the default value.
DH Group Set the Diffie-Hellman group identifier. IPSec peers use the defined value to derive a shared secret
without transmitting it to one another.