Johnson Controls P2000, Руководство по установке

Страница: 13 / 36

24-10618-155 Rev. A 2-1
Chapter
2
This document contains confidential and proprietary information of Johnson Controls, Inc.
© 2012 Johnson Controls, Inc.
C O N F I G U R A T I O N
IPSEC P
ARAMETERS
An IPSec tunnel consists of a pair of unidirectional Security Associations (SAs)—one at
each end of the tunnel—that specify the security parameter index (SPI), destination IP
address, and security protocol (Authentication Header or Encapsulating Security Payload)
employed.
Table 2-1: IPSEC Parameters
Mode Tunnel
Protocol Encapsulating Security Payload (ESP), Authentication
Protocol (AH)
Authentication SH1 Secure Hash Algorithm-1 (SHA-1)
ESP Encryption Triple DES (3DES) 168-bit Key
Key Management AutoKey IKE with a preshared key
Diffie-Hellman Exchange Group 2 1024-bit modulus
Perfect Forward Secrecy (PFS) Enabled
Phase 1 3DES
Main Mode (six message exchange)
Group 2:
Preshared Key
Phase 2 Quick Mode
ESP
PFS
P2000 Server IP Address
IP Address: 200.0.0.1 (static IP address)
Subnet Mask: 255.255.255.0
VPN Router WAN IP Address
IP Address: 201.0.0.2 (static IP address)
Subnet Mask: 255.255.255.0