This object specifies the name of the Internet Key Exchange (IKE) peer database entry. This name identifies an entry in the IKE Peer Database (IPD). The IPD is a list of remote devices that may become IPSec peers. The IPD establishes the authentication and other phase 1 criteria for the peer-to-peer negotiation to eventually reach an IKE Security Association (SA) between this specific peer and the SBC.
To View Peer
On the
main screen, navigate to
All >
Address Context >
Ipsec >
Peer.
The Peer can be checked for each Address Context or for all the Address Contexts created. Use the drop-down box to select the desired Address Contexts.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Main Field |
---|
| |
|
The Peer window is displayed.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer |
---|
|
|
|
To Edit Peer
To edit any of the Peer in the list, click the radio button next to the specific Peer name.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Highlighted |
---|
|
|
|
The Edit Selected Peer window is displayed below.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Edit Window |
---|
| |
|
Make the required changes and click Save at the right hand bottom of the panel to save the changes made.
To Create Peer
To create a new Peer, click New Peer tab on the Peer List panel.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Fields |
---|
|
|
|
The Create New Peer window is displayed.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Create Window |
---|
|
|
|
The following fields are displayed:
Parameter | Description |
---|
Name
| Specifies the name of the peer you are configuring. |
IP Address
| Specifies the 32-bit IP address of the Peer. |
Protocol
| The SPD traffic selector IP PROTOCOL. Valid values for this parameter are: ikev1: Indicates the version of IKE protocol. Internet Key Exchange Version 1.
ikev2: Indicates the enhanced version of IKE protocol. Internet Key Exchange Version 2.
any : Indicates either IKEv1 is used or IKEv2 version is used.
|
Pre Shared Key
| |
Pre Secret secret key with this peer. |
The Pre Shared Key
can be one of the following:The SBC accepts the pre-shared key in the following formats: |
A string of from , . These characters may only be in - from the range of 0-9, a-z, space, and A-Z
|
A hexadecimal value introduced by "0x" and followed by 16 to 64 hexadecimal digits (- . Example: 1234567890abcdef1234567890ABCDEF.
- A HEX encoding of an ASCII string of 16-64 case-sensitive alphanumeric characters from the range of 0-9, a-
|
fF)- Z converted into hexadecimal format starting with "0x". Example: 1234567890aBcDeF converted to a hexadecimal format 0x31323334353637383930614263446546.
In either case the given value represents a "pre-shared secret" between the and the IKE peer. This value is used for mutual authentication for phase 1 negotiation to set up an IKE Security association. Info |
---|
strongly recommends using unpredictable (difficult to guess) values. Use a unique value for each IKE peer. This string is never displayed in plaintext when using the show commands. |
|
Protection
Profile
| The name of the ike protection profile to be applied to the Key management protocol exchange with this peer. |
Local Identity | This object specifies the local identity type that the SBC asserts to the peer during phase 1 authentication. |
Note |
---|
The ipVxAddr attribute is not used at this time. If it is present, ignore it. |
To Copy Peer
To copy any of the created Peer and to make any minor changes, click the radio button next to the specific Peer to highlight the row.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Highlighted |
---|
|
|
|
Click Copy Peer tab on the Peer List panel.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Fields |
---|
| |
|
The Copy Selected Peer window is displayed along with the field details which can be edited.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Copy Window |
---|
|
|
|
Note |
---|
The ipVxAddr attribute is not used at this time. If it is present, ignore it. |
Make the required changes to the required fields and click Save to save the changes. The copied Peer is displayed at the bottom of the original Peer in the Peer List panel.
To Delete Peer
To delete any of the created Peer, click the radio button next to the specific Peer which you want to delete.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Highlighted |
---|
|
|
Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.
Caption |
---|
0 | Figure |
---|
1 | All - Address Context - Ipsec - Peer Delete Confirmation |
---|
|
|
|
Click Yes to remove the specific Peer from the list.