Avaya BCM 4.0 Networking Guida di Configurazione Scaricare il pdf (Pagina 681)

100

101

Chapter 68 Virtual Private Networks (VPN) 681

BCM 4.0 Networking Configuration Guide

Highest encryption ESP-AES128-SHA1

ESP-3DES-SHA1

ESP-3DES-MD5

ESP-DES56-SHA1

ESP-DES56-MD5

AH Authentication only

(SHA1)

AH Authentication only

(MD5)

Select the highest encryption level allowed on this IPSec tunnel.

When the encryption level is negotiated for this tunnel, BCM will not

use any encryption level higher than the encryption level specified

in this field.

For a description of the encryption levels, refer to “Encryption” on

page 652.

Default: ESP-AES128-SHA1

Highest

Diffie-Hellman

Group 5

Group 2

Group 1

Diffie-Hellman is a public-key cryptographic protocol that allows two

parties to establish a shared secret over an insecure

communications channel. It is also used within IKE (Internet Key

Exchange) to establish session keys. IPSec uses the

Diffie-Hellman algorithm to provide the keying material for all other

encryption keys.

Higher (larger bit keying material) Diffie-Hellman groups provide

more security but require more processor time.

Default: Group 2

Enable split

tunneling

<check box> Select to allow the remote computer to use Split Tunneling.

Create automatic

firewall rules

<check box> Select to create automatic firewall rules.

Default: Cleared - which means that no rules are generated.

See Figure 207 for an example of a remote user tunnel firewall

configuration.

Interface for

automatic firewall

rules

<drop-down menu> Select for which interface to generate Firewall Filter rules. These

rules are necessary to allow packets for this Remote User tunnel

through the firewall.

Default: None - which means that no rules are generated.

DNS/WINS Settings

Domain Name Specify the Domain Name of the Domain in which the remote

computer resides.

DNS Servers

Primary DNS <IP address> Specify the IP address of the Primary DNS server that the remote

computer uses.

Secondary DNS Specify the IP address of the Secondary DNS server the remote

computer uses. The remote computer uses the Secondary DNS

server if the Primary DNS server is not available or does not have

an entry for the domain name specified.

WINS Servers

Primary WINS <IP address> Specify the IP address of the Primary WINS server that the remote

computer uses.

Secondary WINS <IP address> Specify the IP address of the Secondary WINS server that the

remote computer uses.

Table 175 IPSec Remote User Tunnel settings (Sheet 3 of 3)

Attribute Value Description

1 2 ... 676 677 678 679 680 681 682 683 684 685 686 ... 757 758

Commenti su questo manuale

Nessun commento

Avaya BCM 4.0 Networking Guida di Configurazione Pagina 681

Commenti su questo manuale

Prodotti e manuali riguardandi Networking Avaya BCM 4.0 Networking