3.3.5 IPSec(VPN) Advanced Settings
The IPSec(VPN) configuration page includes the Advanced Settings for the ipsec.conf file. These settings, described in the
following table, are displayed when the Show Advanced Settings checkbox is enabled.
NAME
DESCRIPTION
IKE (Internet Key Exchange) Cipher Suite
Protocols used to exchange cryptographic keys. The suite includes algorithms for Encryption (confidentiality),
Hash (message authentication) and DH group (key exchange) protocols when setting up the VPN.
ESP (Encapsulating Security Payload)
Cipher Suite
Protocols used to exchange cryptographic keys. The suite includes algorithms for Encryption (confidentiality),
Hash (message authentication) and DH group (key exchange) protocols when setting up the VPN. if DH group
is used, the higher group numbers are more secure, but take a longer time to compute the key.
Security Association (SA)
Reauthentication
Specifies whether the device should reauthenticate when an IKE Security Association (SA) changes. (An SA
describes how two or more devices will communicate securely.)
IKE Lifetime
Specifies how long the keying channel of a connection (ISAKMP or IKE SA) should last before being
renegotiated.
Key Lifetime
Specifies how long a particular instance of a connection (a set of encryption/authentication keys for user
packets) should last, from successful negotiation to expiry.
Rekey
Specifies whether a connection should be renegotiated when it is about to expire.
Keying Tries
Specifies how many attempts (a positive integer or %forever) should be made to negotiate a connection, or a
replacement for one, before giving up. The default is 3.
Rekey Margin
Specifies how long before connection expiry or keying-channel expiry, should attempts to negotiate a
replacement begin.
DPD Delay
Specifies the period time interval with which R_U_THERE messages/INFORMATIONAL exchanges are sent to
the peer.
Table 3.10 Advanced Settings Descriptions
3.3.6 SNMP configuration
An administrator can configure SNMP, which is needed if notifications are to be sent to an SNMP management application.
NOTE: The Avocent® ACS800/8000 Advanced Console Server Enterprise MIB text file is available in the appliance at:
/usr/local/mibs/ACS8000-MIB.asn. The Avocent® ACS800/8000 Advanced Console Server Enterprise TRAP MIB text
file is available in the appliance at: /usr/local/mibs/ACS8000-TRAP-MIB.asn. Both files are also available at
www.VertivCo.com.
To configure SNMP:
1.
Click
Network - SNMP
.
2.
Click the
System
button.
a. Enter the SysContact information (email address of the console server’s administrator, for example,
b. Enter the SysLocation information (physical location of the console server, for example, Avocent_
ACS8000), then click
Save
to go back to the SNMP screen.
3.
Click
Add
to add a new community or v3 user.
4. Enter the community name for SNMP v1/v2 or the user name for SNMP v3 in the Name field and enter the OID.
5.
Select the desired permission from the pull-down menu. Choices are
Read and Write
or
Read Only
.
3 Accessing the Console System via the Web UI
33
Содержание Avocent ACS800
Страница 1: ...Avocent ACS800 8000 Advanced Console Server Installer User Guide ...
Страница 40: ...8 Click Save Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 36 ...
Страница 83: ...Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 79 This page intentionally left blank ...
Страница 98: ...Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 94 This page intentionally left blank ...
Страница 99: ...Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide ...