Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 383 / 861

382 Providing remote access using VPN tunnels
Understanding VPN policies
6
On the Data Compression Preference tab, in the Available list box, select a data compression
preference, and then click the right-arrow
>> button to move it to the Selected list box. Supported
types are:
■
LZS (compresses data by replacing redundant strings with abbreviated tokens)
■
No compression
7 On the Diffie-Hellman Preference tab, in the Available list box, select a group, and then click the
right-arrow
>> button to move it to the Selected list box.
8 On the Description tab, you can type a more detailed description than you typed in the Caption text
box.
9 Click OK .
You will need to reboot the security gateway before the changes to your VPN policy take effect.
10 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
11 To use the VPN policy, do one of the following:
■
Create a VPN tunnel, and select the VPN policy.
■
Create a clientless VPN rule with VPN as the network application type.
Related information
For further information related to this topic, see the following:
■
“IPsec IKE policy Properties—General tab” on page 609
■
“IPsec/IKE policy Properties—Data Privacy Preference tab” on page 611
■
“IPsec IKE policy Properties—Data Integrity Preference tab” on page 612
■
“IPsec IKE policy Properties—Data Compression Preference tab” on page 613
■
“IPsec IKE policy Properties—Diffie-Hellman Preference tab” on page 613
■
“Configuring tunnels” on page 385
Creating a VPN policy for IPsec with static key
You can configure a VPN policy with static IKE to support static VPN tunnels. In static VPN tunnels,
both tunnel endpoints must have the same secret keys, security parameter indexes (SPIs), and
encryption and authentication schemes.
Prerequisites
None.
To configure a VPN policy for IPsec with static key
1
In the SGMI, in the left pane, under Policy, click VPN .