Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION
97
SA only restricts the unidirectional data security policy
and has its own independent SPI security index
number. Here, the SPI number from the local to the
peer is filled in.
Security Parameter Index: remote
SPI number from the local to the peer; Fill it in with
reference to
Security Parameter Index: Local
.
IPSec Protocol
Security protocol; IPSec allows two security protocol
types: ESP (perform encryption and authenticate data
completeness at the same time) and AH (only
authenticating data completeness). ESP is
recommended.
Encryption Algorithm (ESP only)
Data encryption algorithm; This product supports the
following algorithms, encryption types and key lengths:
3DES-CBC, AES-CBC (128), AES-CBC (192) and
AES256-CBC (256). AES-CBC (192) algorithm is
recommended.
Local Encryption Key (ESP only)
Encryption algorithm key of outgoing data; Make a
selection based on the algorithm type and key length
selected in
Encryption Algorithm
. For example, if
AES-CBC (192) is selected, it is necessary to submit a
48-length hexadecimal string as encryption key
(48=192/4).
Remote Encryption Key (ESP only)
Encryption algorithm key of incoming data; Fill it in
with reference to
Local Encryption Key
.
Authentication Algorithm
Authentication algorithm of data completeness; This
product supports the following algorithms, hash types
