Nortel BSR222, Configuration, Page: 238 / 451

238 Chapter 13 VPN
NN47922-500
IKE phases
There are two phases to every IKE (Internet Key Exchange) negotiation–phase 1
(Authentication) and phase 2 (Key Exchange). A phase 1 exchange establishes an
IKE SA and the second one uses that SA to negotiate SAs for IPSec.
Figure 75 Two phases to set up the IPSec SA
Start Port Type a port number in this field.
To forward only one port, type the port number again in the End
Port field.
To forward a series of ports, type the start port number here and
the end port number in the
End Port field.
End Port Type a port number in this field.
To forward only one port, type the port number in the Start Port
field above and then type it again in this field.
To forward a series of ports, type the last port number in a series
that begins with the port number in the
Start Port field above.
Server IP Address Type your server IP address in this field.
Apply Click this button to save these settings and return to the VPN
Branch Office - IP Policy screen.
Reset Click this button to begin configuring this screen afresh.
Cancel Click this button to return to the VPN Branch Office - IP Policy
screen without saving your changes.
Table 58 VPN Branch Office — IP Policy - Port Forwarding Server
Label Description