Avaya Configuring IPsec Services Manuale Utente Scaricare il pdf (Pagina 59)

308630-14.00 Rev 00

4-1

Chapter 4

Customizing IPsec

This chapter contains information about changing an IPsec configuration that you

have already set up. After initial configuration, this may be your most common

task.

This chapter includes the following information:

Changing Existing Policies

You may find it necessary to change which policies are applied to data in a

security association, change the order in which multiple policies are applied, or

remove policies.

Topic Page

Changing Existing Policies 4-1

Changing Existing Security Associations 4-8

Disabling IPsec 4-11

1 2 ... 54 55 56 57 58 59 60 61 62 63 64 ... 121 122

Configuring IPsec Services 1
Trademarks 2
Restricted Rights Legend 2
Statement of Conditions 2
Contents 7
308630-14.00 Rev 00 ix 9
308630-14.00 Rev 00 xi 11
308630-14.00 Rev 00 xiii 13
Before You Begin 15
Text Conventions 16
Acronyms 17
Hard-Copy Technical Manuals 19
How to Get Help 19
Chapter 1 21
Overview of IPsec 21
About IPsec 22
Note Regarding IPsec and NAT 22
Supported Routers 23
Supported WAN Protocols 23
IPsec Services 24
How IPsec Works 25
IPsec Tunnel Mode 26
IPsec Elements 27
Security Gateways 28
Security Policies 28
Security Associations 31
Security Protocols 35
Authentication Header 36
Perfect Forward Secrecy 37
Chapter 2 39
Installing IPsec 39
Upgrading Router Software 40
Installing the IPsec Software 40
308630-14.00 Rev 00 41
Securing Your Site 42
Securing Your Configuration 42
Random Number Generator (RNG) 43
Generating NPKs 43
Caution: 44
Changing an NPK 46
Monitoring NPKs 46
Chapter 3 47
Starting IPsec 47
Creating Policies 48
Specifying an Action 49
Policy Considerations 49
Creating an Outbound Policy 50
Creating an Inbound Policy 52
About Automated SA Creation 54
About Manual SA Creation 56
Chapter 4 59
Customizing IPsec 59
Editing a Policy 60
Adding a Policy 61
Frame Relay Protocol 62
Reordering Policies 64
Frame Relay 65
Manual SA Modifications 67
Disabling IPsec 69
Appendix A 71
Site Manager Parameters 71
Enabling IPsec Parameters 72
IPsec Policy Parameters 73
Appendix B 83
Definitions of k Commands 83
Appendix C 85
RTR4 Subnet 192.32.30.0 88
Manual SA Policy Examples 89
RTR1 and RTR2 92
RTR1 93
RTR2 93
RTR3 96
RTR4 96
Supported Versions 100
Configuring Through a Browser 100
Terminology 101
Configuration Specifics 102
Feature Comparison Summary 103
Troubleshooting Tips 104
Configuration Examples 105
Protocol Numbers 109
Appendix D 109

Commenti su questo manuale

Nessun commento

Avaya Configuring IPsec Services Manuale Utente Pagina 59

Commenti su questo manuale

Prodotti e manuali riguardandi Software Avaya Configuring IPsec Services