AudioCodes Mediapack mp-11x, Руководство пользователя

Страница: 206 / 390

SIP User's Manual 206 Document #: LTRT-65409
MediaPack Series
Table 5-43: IKE Table Configuration Parameters
Parameter Name Description
IKE SA LifeTime (KB)
[IKEPolicyLifeInKB]
Determines the lifetime (in kilobytes) the SA negotiated in the first IKE
session (main mode) is valid. After this size is reached, the SA is re-
negotiated.
The default value is 0 (this parameter is ignored).
The lifetime parameters (IKEPolicyLifeInSec and IKEPolicyLifeInKB) determine the duration the SA
created in the main mode phase is valid. When the lifetime of the SA expires, it's automatically
renewed by performing the IKE first phase negotiations. To refrain from a situation where the SA
expires, a new SA is negotiated while the old one is still valid. As soon as the new SA is created, it
replaces the old one. This procedure occurs whenever an SA is about to expire.
First to Fourth Proposal
Encryption Type
[IKEPolicyProposalEncryp
tion_X]
Determines the encryption type used in the main mode negotiation for
up to four proposals. X stands for the proposal number (0 to 3).
The valid encryption values are:
ƒ
Not Defined (default)
ƒ
[1]
DES-CBC
ƒ
[2]
Triple DES-CBC
ƒ
[3]
AES-CBC
First to Fourth Proposal
Authentication Type
[IKEPolicyProposalAuthen
tication_X]
Determines the authentication protocol used in the main mode
negotiation for up to four proposals.
X stands for the proposal number (0 to 3).
The valid authentication values are:
ƒ
Not Defined (default)
ƒ
[2]
HMAC-SHA1-96)
ƒ
[4]
HMAC-MD5-96
First to Fourth Proposal DH
Group
[IKEPolicyProposalDHGro
up_X]
Determines the length of the key created by the DH protocol for up to
four proposals.
X stands for the proposal number (0 to 3).
The valid DH Group values are:
ƒ
Not Defined (default)
ƒ
[0]
DH-786-Bit
ƒ
[1]
DH-1024-Bit