Nortel BCM 3.7, Manual

Page: 765 / 1004

IPSec 765
Programming Operations Guide
IPSec
The IPsec tunneling protocol is supported by Nortel Networks and other third-party vendors. IPsec
is an emerging standard that offers a strong level of encryption (DES and Triple DES), integrity
protection (MD5 and SHA), and the IETF-recommended Internet Security Association & Key
Management Protocol (ISAKMP) and Oakley Key Determination Protocols.
This section includes information about:
• “Encryption” on page 766
• “Settings required for IPSec tunnels” on page 768
• “Changing the IPSec global settings” on page 773
• “IPSec Branch Office configuration” on page 774
• “Creating a tunnel between two Business Communications Managers” on page 781
• “Creating a tunnel between a Business Communications Manager and a Contivity Extranet
Switch v02_61” on page 782
• “IPSec Remote User configuration” on page 784
• “Adding a Remote User IPSec Tunnel” on page 786
IPsec offers the following features
• Branch Office support that allows you to configure an IPSec tunnel connection between two
private networks.
• Client support via the Contivity VPN client. The Business Communications Manager supports
VPN client support from a remote computer with version 4.60 of the Contivity VPN Client
installed. No special ISP services are required.
• Support for IP address translation via encapsulation, packet-by-packet authentication.
• Strong encryption and token codes.