AudioCodes Media Pack MP-11x, Руководство пользователя

Страница: 162 / 650

User's Manual 162 Document #: LTRT-65432
MP-11x & MP-124
IPSec to identify the loss of peer connectivity. As such, the Security Associations (SA)
remain active until their lifetimes naturally expire, resulting in a "black hole" situation where
both peers discard all incoming network traffic. This situation may be resolved by
performing periodic message exchanges between the peers. When no reply is received,
the sender assumes SA’s are no longer valid on the remote peer and attempts to
renegotiate.
Notes:
•
Incoming packets whose parameters match one of the entries in the IP Security
Associations table but is received without encryption, is rejected.
•
If you change the device's IP address on-the-fly, you must then reset the device
for IPSec to function properly.
•
The proposal list must be contiguous.
•
For security, once the IKE pre-shared key is configured, it is not displayed in any
of the device's management tools.
•
You can also configure the IP Security Associations table using the table ini file
parameter IPsecSATable (see 'Security Parameters' on page
503 ).

To configure the IPSec Association table:
1. Open the IP Security Associations Table page ( Configuration tab > VoIP menu >
Security submenu > IPSec Association Table ).
2. Click the Add button; the following dialog box appears:
Figure 13-5: IP Security Associations Table Page - Add Record Dialog Box
3. Configure the parameters, as required. In the above figure, a single IPSec/IKE peer
(10.3.2.73) is configured. Pre-shared key authentication is selected with the pre-
shared key set to 123456789. In addition, a lifetime of 28800 seconds is set for IKE
and a lifetime of 3600 seconds is set for IPSec. For a description of the parameters,
see the table below.
4. Click Submit .