Nortel BSG12aw 1.0, Руководство по настройке

Страница: 66 / 200

66 VPN configuration
NN47928-500 NN47928-500
7 In the Traffic Selector box, in the Local Address field, enter the source IP
address of outbound traffic.
8 In the Local Address Mask field, enter the local network mask of outbound
traffic.
9 In the Remote Address field, enter the destination network address of
outbound traffic.
10 In the Remote Address Mask field, enter the destination network mask of
outbound traffic.
11 From the Protocol list, select Any .
12 In the IKE (Phase 1) Proposal box, from the IPSec Encryption list, select an
encryption algorithm.
13 From the IPSec Authentication list, select an authentication algorithm.
14 From the DH Group list, select a group .
15 From the Exchange Mode list, select Main or Agressive .
16 From the Life Time list, select the Seconds , Minutes , or Hours .
17 In the Life Time Value field, enter the life time value.
18 From the Peer Identity Type list, select IPV4 for the peer identity type.
19 From the Peer Identity Value list, select the peer identity value.
The list contains the Remote Identity values entered on the VPN Global Settings
screen.
20 From the Local Identity Type list, select IPV4 for the local identity type.
21 In the Local Identity Value field, enter the local identity value.
22 In the IPSec (Phase 2) Proposal box, from the Protocol list, select ESP or AH .
23 From the Encryption list, select an encryption algorithm.
24 From the Authentication list, select an authentication algorithm.
25 From the IPSec Mode list, select Tunnel .
26 From the Preferred Forward Secrecy list, select a PFS option.
27 From the Life Time list, select the Seconds , Minutes , or Hours .
28 In the Life Time Value field, enter the life time value.
29 Click Apply .
End
Variable definitions
The following table describes the variables and values for configuring IKE preshared secret.
Variable Value
Policy Action Select this check box to create a policy action.
Policy Name Type a IPsec policy name. Each policy must have a unique name.
Existing Policies Select an existing policy for the IPsec policy.