Encryption Key Manual Settings (Default Settings)
Device Management > Configuration > Security >
IPsec > Encryption Key Manual Settings (Default Settings)
Use this page to configure the IPsec encryption key settings manually. The Default Settings are the IPsec settings configured for communicating with peers not specified on the Settings 1 to Settings 4 pages.
Address Type
Select the address type for IPsec communications. Selecting Inactive disables all the other settings on this page.
Encapsulation Mode
Select one of the following encapsulation modes:
Transport
This mode protects the payload of IP packets. Select this mode for communication between IPsec hosts.
Tunnel
This mode protects entire IP packets. Select this mode for communication between security gateways (VPN devices, for example).
Note
- If you select Transport, the Tunnel Address Type and Tunnel End Point options are unavailable.
- If you select IPv4/IPv6 for Address Type, you cannot specify Tunnel mode.
Tunnel Address Type
Select the tunnel address type that you require.
Tunnel End Point
If you select Tunnel for Encapsulation Mode, you must also specify the IPsec coverage (i.e. the start and end of the tunnel end point).
Note
- You must specify an IP address that is consistent with the specified Address Type.
- For the start of the tunnel end point, enter the Local Address.
SPI (Output)
Specify the output SPI (Security Parameter Index) value for the manual key. You can enter a value between 256 and 4095.
SPI (Input)
Specify the input SPI (Security Parameter Index) value for the manual key. You can enter a value between 256 and 4095.
Security Protocol
Select a security protocol for IPsec communications.
Note
- If you select AH, the Encryption Algorithm and Encryption Key settings are unavailable.
Authentication Algorithm
Select the authentication algorithm that you require.
Authentication Key
This field indicates whether or not an authentication key is created for the selected authentication algorithm.
To create or edit an authentication key, click Change.
Encryption Algorithm
Select the encryption algorithm that you require.
Encryption Key
This field indicates whether or not an encryption key is created for the selected encryption algorithm.
To create or edit an encryption key, click Change.
Buttons
OK
Click to send the settings to the machine. To apply the settings, click OK on the IPsec page.
Cancel
Click to cancel the settings.