In this section:

Related articles:

 

This object specifies the name of the Internet Key Exchange (IKE) peer database entry. This name identifies an entry in the IKE Peer Database (IPD). The IPD is a list of remote devices that may become IPSec peers. The IPD establishes the authentication and other phase 1 criteria for the peer-to-peer negotiation to eventually reach an IKE Security Association (SA) between this specific peer and the SBC.

To View Peer

On the SBCmain screen, navigate to All > Address Context > Ipsec > Peer.

The Peer can be checked for each Address Context or for all the Address Contexts created. Use the drop-down box to select the desired Address Contexts.

All - Address Context - Ipsec - Peer Main Field

 

The Peer window is displayed.

All - Address Context - Ipsec - Peer

 

 

To Edit Peer

To edit any of the Peer in the list, click the radio button next to the specific Peer name.

All - Address Context - Ipsec - Peer Highlighted

 

The Edit Selected Peer window is displayed below.

All - Address Context - Ipsec - Peer Edit Window

 

Make the required changes and click Save at the right hand bottom of the panel to save the changes made.

To Create Peer

To create a new Peer, click New Peer tab on the Peer List panel.

All - Address Context - Ipsec - Peer Fields

 

The Create New Peer window is displayed.

All - Address Context - Ipsec - Peer Create Window

 

The following fields are displayed:

Peer Parameters

 

Parameter

Description

Name

Specifies the name of the peer you are configuring.

IP Address

Specifies the 32-bit IP address of the Peer.

Protocol

The SPD traffic selector IP PROTOCOL. Valid values for this parameter are:

  • ikev1: Indicates the version of IKE protocol. Internet Key Exchange Version 1.
  • ikev2: Indicates the enhanced version of IKE protocol. Internet Key Exchange Version 2.
  • any: Indicates either IKEv1 is used or IKEv2 version is used.

Pre Shared Key

Specifies the Pre-shared Secret with this peer. The Pre Shared Key can be one of the following:

  • A string of from 32 to 128 case-sensitive, alphanumeric characters. These characters may only be in the range 0-9, a-z, space, and A-Z
  • A hexadecimal value introduced by "0x" and followed by 16 to 64 hexadecimal digits (0-9, a-f, A-F)

In either case the given value represents a "pre-shared secret" between the SBC and the IKE peer. This value is used for mutual authentication for phase 1 negotiation to set up an IKE Security association.

Sonus strongly recommends using unpredictable (difficult to guess) values. Use a unique value for each IKE peer. This string is never displayed in plaintext when using the show commands.

Protection
Profile

The name of the ike protection profile to be applied to the Key management protocol exchange with this peer.

Local IdentityThis object specifies the local identity type  that SBC asserts to the peer during phase 1 authentication.

The ipVxAddr attribute is not used at this time. If it is present, ignore it.

To Copy Peer

To copy any of the created Peer and to make any minor changes, click the radio button next to the specific Peer to highlight the row.

All - Address Context - Ipsec - Peer Highlighted

 


 

Click Copy Peer tab on the Peer List panel.

All - Address Context - Ipsec - Peer Fields

 

 

The Copy Selected Peer window is displayed along with the field details which can be edited.

All - Address Context - Ipsec - Peer Copy Window

 

 

The ipVxAddr attribute is not used at this time. If it is present, ignore it.

Make the required changes to the required fields and click Save to save the changes. The copied Peer is displayed at the bottom of the original Peer in the Peer List panel.

To Delete Peer

To delete any of the created Peer, click the radio button next to the specific Peer which you want to delete.

All - Address Context - Ipsec - Peer Highlighted

 

 

Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.

All - Address Context - Ipsec - Peer Delete Confirmation

 

Click Yes to remove the specific Peer from the list.

 

 

  • No labels