Extreme Networks Summit WM3000 Series, Справочное руководство

Страница: 373 / 513

Summit WM3000 Series Controller System Reference Guide
373
b
Refer to the Status field for the state of the requests made from applet. This field displays error
messages if something goes wrong in the transaction between the applet and the controller.
c Click OK to use the changes to the running configuration and close the dialog.
d Click Cancel to close the dialog without committing updates to the running configuration.
Viewing SA Statistics
A security association (SA) is a description of how two peers employ a security to interoperate securely.
IKE requires SAs to identify connection attributes. IKE can negotiate and establish its own SA. An IKE
SA is used by IKE only, and is bi-directional.
To view SA statistics:
1
Select Security > IKE Settings from the main menu tree.
2 Click the SA Statistics tab.
.
3 Refer to the information displayed within SA Statistics tab to discern the following:
SA Lifetime
Define an integer for the SA lifetime. The default is 60 seconds. With
longer lifetimes, security defines future IPSec security associations
quickly. Encryption strength is great enough to ensure security without
using fast rekey times. Extreme Networks recommends using the default
value.
DH Group
Set the Diffie-Hellman group identifier. IPSec peers use the defined value
to derive a shared secret without transmitting it to one another.