Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Panel

...

borderColorgreen
bgColortransparent
borderWidth2

In this section:

Table of Contents
maxLevel2

Info
iconfalse

Related articles:

Children Display

 

Additional section:

Children Display
styleh6

...

In this section:

...

This profile specify an encryption cipher, a maximum time period for maintaining a security association between these peers (the SA "lifetime"), and an antireplay policy. The three profiles are prioritized from one to three for usage with the SPD entry.

To View IPsec Protection Profile

On SBC main screen, go to Configuration > Security Configuration >IPsec Protection Profile. The IPsec Protection Profile window is displayed.

Caption
0Figure
1Security Configuration - IPsec Protection Profile

Image Modified 

To Edit IPsec Protection Profile

To edit any of the IPsec Protection Profile in the list, click the radio button next to the specific IPsec Protection Profile name.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Highlighted

Image Modified 

The Edit Selected IPsec Protection Profile window is displayed below.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Edit Window

Image Modified

Make the required changes and click Save at the right hand bottom of the panel to save the changes made.

To Create IPsec Protection Profile

To create a new IPsec Protection Profile, click New IPsec Protection Profile tab on the IPsec Protection Profile List panel.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Fields

Image Modified 

The Create New IPsec Protection Profile window is displayed.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Create Window

Image Modified 

The following fields are displayed:

Caption
0Table
1IPsec Protection Profile Parameters
3IPsec Protection Profile Parameters
ParameterDescription

Name

The name of the IPsec Protection Profile.

SA Lifetime
Time

The SA Lifetime setting, in seconds. This is the maximum interval that any one Security Association will be maintained before possible re-keying. Must be 1200- 1,000,000, default is 28,800 (seconds). This parameter applies to the IKE SA when it appears in the IKE Protection Profile and to the IPsec SA when it appears in the IPsec Protection Profile.

The default value corresponds to 8 hours.

SA Lifetime
Byte

Specifies the IPsec Protection Profile SA Lifetime setting in number of bytes. The default value is "unlimited" or enter value in range of (1000..4, 294, 967, 295) number of bytes.

To Copy IPsec Protection Profile

To copy any of the created IPsec Protection Profile and to make any minor changes, click the radio button next to the specific IPsec Protection Profile to highlight the row.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Highlighted

Image Modified
 

Click Copy IPsec Protection Profile tab on the IPsec Protection Profile List panel.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Fields

Image Modified
 

The Copy Selected IPsec Protection Profile window is displayed along with the field details which can be edited.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Copy Window

Image Modified 

The following fields are displayed:

Caption
0Table
1IPsec Protection Profile Parameters
ParameterDescription

Name

The name of the IPsec Protection Profile.

SA Lifetime
Time

The SA Lifetime setting, in seconds. This is the maximum interval that any one Security Association will be maintained before possible re-keying. Must be 1200- 1,000,000, default is 28,800 (seconds). This parameter applies to the IKE SA when it appears in the IKE Protection Profile and to the IPsec SA when it appears in the IPsec Protection Profile.

The default value corresponds to 8 hours.

SA Lifetime
Byte

Specifies the IPSec Protection Profile SA Lifetime setting in number of bytes. The default value is "unlimited" or enter value in range of (1000..4, 294, 967, 295) number of bytes.

Esp Algorithms
Encryption

The IPsec Protection Profile Encryption Cipher. You can select multiple encryption.

Options are:

  • 3DesCbc
  • aesCbc128
  • null
Integrity

The IPsec Protection Profile integrity Cipher. You can select multiple parameters.

Options are:

  • hmacMd5
  • hmacSha1

Make the required changes to the required fields and click Save to save the changes. The copied IPsec Protection Profile is displayed at the bottom of the original IPsec Protection Profile in the IPsec Protection Profile List panel.

To Delete IPsec Protection Profile

To delete any of the created IPsec Protection Profile, click the radio button next to the specific IPsec Protection Profile which you want to delete.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Highlighted

Image Modified
 

Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.

Caption
0Figure
1Security Configuration - IPsec Protection Profile Delete Confirmation

Image Modified

Click OK to remove the specific IPsec Protection Profile from the list.

 

...

Pagebreak