3Com 3C16111 - SuperStack 3 Firewall Web Site Filter, Руководство пользователя

Страница: 126 / 214

126 C
HAPTER
9: C
ONFIGURING
V
IRTUAL
P
RIVATE
N
ETWORK
S
ERVICES
Figure 57 VPN Configure Window
Adding/Modifying
IPSec Security
Associations
To add a new Security Association (SA) click the drop down box labelled
Security Associations and select the option labelled Add New SA . Set up
the new SA using the options below. Click Update to save your changes.
To modify a SA click the drop down box labelled Security Association and
select the SA you want to modify. Change the SA using the options
below. When you have completed your changes click the
Update button
to save your changes.
To delete a SA click the drop down box labelled Security Associations and
select the SA you want to delete. Click the Delete button to delete the
SA.
The GroupVPN Security Association cannot be deleted.
IPSec Keying Mode
To select the keying mode click on the IPSec Keying Mode drop down box
and select one of the options.
■
IKE Using pre-shared secret (Internet Key Exchange using pre-shared
Secret) is the default keying mode and offers more security than a
Manual Key .
■
Manual Key does not offer as high a level of security as IKE but is
compatible with a wider range of VPN devices.
This option is not available when using GroupVPN .
DUA1611-0AAA02.book Page 126 Thursday, August 2, 2001 4:01 PM