Page History

Enter a name for the configuration in the Configuration Name field. The SBC configuration name can contain only letters, numbers, dashes (-), apostrophes ('), underscores (_), colons (:) and spaces.

Creating an IKE Protection Profile

In the SBC

Configuration Manager window

:   

1. Click Configuration > Profile Management.
   
2. On the navigation pane, choose Security Profiles as the Category.

3. Click IKE Protection Profile > New IKE Protection Profile.

   Caption
   0 Figure 1 +New IKE Protection Profile
   Image Removed

   The Create New IKE Protection Profile Protection Profile window is displayed.

4. Type the profile Name, SA Lifetime Time, and DPD Interval. Choose the appropriate option in PFS Required.

5. Click Save.
    

   Caption
   0 Figure 1 Creating New IKE Protection Profile
   Image Modified

6. Use the following table to configure the profile and click Save.

To View and Edit Algorithm

Configuring the Algorithm for the Profile

In the SBC Configuration Manager window:  

1. Click Configuration > Profile Management.
   
2. On the navigation pane, choose Security Profiles as Category.

3. Click IKE Protection Profile > New IKE Protection Profile > Algorithms. In IKE Protection Profile drop-down menu, choose the desired profile to view its respective Algorithm parameters. The Algorithms window is displayed.

4. Choose the relevant parameters, and click Savename of your IKE protection profile in IKE Protection Profile.

   Caption
   0 Figure 1 New IKE Protection Profile - Algorithms

   
   
   

5. Use the following table to configure algorithm parameters for the profile and click Save.

   Caption
   0 Table 1 New IKE Protection Profile - Algorithms Parameters
   Parameter Description Encryption The IKE Protection Profile Encryption Cipherprofile encryption cipher. You can select multiple encryptions. Options are: _3DesCbc aesCbc128 (default) Integrity The IKE Protection Profile profile integrity Ciphercipher. You can select multiple parameters. Options are: hmacMd5  (default) hmacSha1 hmacsha256 Dh Group Specifies the DH group(s) supported in the IKE exchange. The options are: modp768 modp1024  modp1024  (default) modp1536 modp2048

Creating an IPsec - Peer

The object specifies the name of the Internet Key Exchange (IKE) peer database entry that identifies This object creates an entry in the IKE Peer Database (IPD). The IPD is a list of remote devices that may become IPsec peers. The IPD establishes the authentication and other phase 1 criteria for the peer-to-peer negotiation to eventually reach an IKE Security Association (SA) between this specific peer and the SBC.

Creating a Peer

In the SBC Configuration Manager window: 

1. Click All > Address Context > IPsec > Peer. The Peer window opens and the Peer List is displayed.

2. Choose an address context to which you want to add the peer from the Address Context list and click New Peer. The Create New Peer window opens

3. On the SBC Configuration Manager page, click All.

4. On the navigation pane, choose Address Context > IPsec > Peer. Click New Peer.

   Caption
   0 Figure 1

   +

   Create New Peer Window

   Image Modified

   The Create New Peer window is displayed.

   Caption

   0	Figure
   1	Creating New Peer

   Image Removed

5. Use the following table to configure the peer and click Save.

Viewing a Peer

1. On the navigation pane, choose Address Context > IPsec > Peer.

2. In Address Context drop-down menu, choose the Peer. The Peer List is displayed.

   Caption
   0 Figure 1 Viewing Peer
   Image Removed

Editing a Peer

Click the radio button adjacent to Peer name.

Caption
0 Figure 1 Editing Peer
Image Removed

Modify the relevant parameters, and click Save.

Caption
0 Figure 1 Editing Selected Peer
Image Removed

Copying a Peer

Click the radio button adjacent to the Peer. Click Copy Peer.

Caption
0 Figure 1 Copying Peer
Image Removed

Type the relevant parameters, and click Save.

Caption
0 Figure 1 Copying Selected Peer
Image Removed

Configuring the Peer Remote Identity

This object specifies the remote IKE identity that is authorized to be negotiated with during phase I negotiation.

In the SBC Configuration Manager window: 

1. Click All > Address Context > IPsec > Peer > Remote Identity. The Remote Identity window opens.
2. In the drop-down lists, select the Address Context and Peer names for the peer you are configuring. 

3. Select a Type of identifier in the drop-down list and then provide the specific value in the adjacent entry field. Option are:

   • IP v4Addr (default)
   • IP v4Addr
   • FQDN

Deleting a Peer

1. Click the radio button adjacent to the Peer. Click Delete.
   

   Caption
   0 Figure 1 Deleting Peer
   Image Removed

2. A delete confirmation message appears. Click Yes.

   Caption
   0 Figure 1 Deleting Peer Prompt
   Image Removed

Peer - Local Identity

The object specifies the local identity type  that 

Viewing and Editing Local Identity

1. On the SBC Configuration Manager page, click All.

2. On the navigation pane, choose Address Context > IPsec > Peer > Local Identity. The Local Identity window is displayed.

   Caption
   0 Figure 1 Editing Local Identity
   Image Removed

3. In Address Context drop-down menu, choose the Local Identity.

4. IN Peer drop-down menu, choose the Peer.

5. In Type drop-down menu, choose the IP V6Addr.
6. In IP Address Var, type the IP V6 address.

7. Click Save.

Creating an IPsec - SPD

This object is an IPsec Security Policy Database (SPD) entry. The IPsec SPD is an ordered list of entries ("rules") that specify sets of packets and determine whether or not to permit, deny, or protect packets between the SBC and the peer that is referenced from the entry. If the packets are to be protected, this entry references information that specifies how to protect them. The

Peer - Remote Identity

The object specifies the remote Identity that 

Viewing and Editing Remote Identity

IPsec - SPD

The object is used to configure SPD for the SBC. The SPD establishes the phase 2 criteria for the negotiation between the SBC and the IKE peer. The successful completion of this negotiation results in a Security Association (SA).

Creating an SPD

In the SBC Configuration Manager window: 

1. Click All > On the navigation pane, choose Address Context > IPsec > SPD. The SPD window is displayed.Type relevant parameters, and click Save

2. Choose an address context to which you want to add the SPD from the Address Context list. The Create New SPD window opens.

   Caption
   0 Figure 1 Creating New SPD
   Image Modified

3. Use the following table to configure the SPD and click Save.

Length/Range

1-23

N/A

Local Ip Addr Var


N/A

Specifies the local IPv4 or IPv6 address of the SPD traffic selector.

Saving and Activating the Configuration in the Cluster

Once you have completed making configuration changes, click Apply Saved Changes and Close at the top-right of the SBC Configuration Manager window. When prompted, confirm that you want to save and activate your configuration changes. The SBC Configuration Manager window closes. The OAM node notifies the SBC nodes in the cluster of the configuration changes and stores a record of the updated configuration back to the EMS. 

Viewing an SPD

1. On the SBC Configuration Manager page, click All.

2. On the navigation pane, choose Address Context > IPsec > SPD. The SPD window is displayed.

   Caption
   0 Figure 1 Viewing an SPD
   Image Removed

3. In Address Context drop-down menu, choose the appropriate address context to view the SPD.

Editing an SPD

1. Click the radio button adjacent to SPD name.

   Caption
   0 Figure 1 Editing an SPD
   Image Removed

   The Edit Selected SPD window is displayed.

2. Modify the relevant parameters, and click Save.

   Caption
   0 Figure 1 Editing Selected SPD Parameters
   Image Removed

Copying an SPD

Click the radio button adjacent to SPD name. Click Copy SDP.

Deleting an SPD

A delete confirmation message appears. Click Yes.

Image Removed