Use the IKE Protection Profile window to configure IKE Protection Profiles by establishing an encryption algorithm, the maximum SA lifetime, and other SA conditions, for an IKE peer. These properties are linked to each IKE peer that is provisioned with this profile. To View IKE Protection ProfilesOn the SBC main screen, go to Configuration > Profile Management > Category: Security Profiles > IKE Protection Profile. The IKE Protection Profile window is displayed.  Image Modified
To Create an IKE Protection ProfileTo create a new IKE Protection Profile, click New Ike Protection Profile. The Create New IKE Protection Profile window opens.  Image Modified
Parameter | Length/Range | Description |
|---|
Name | Up to 23 characters | The name of the IKE Protection Profile. | SA Lifetime
Time | 1200-1000000 | The SA Lifetime setting, in seconds. This is the maximum interval that any one Security Association will be maintained before possible re-keying. |
Must be 1200- 1,000,000, The default is 28,800 seconds ( |
secondsCorresponds to 8 hours). This parameter applies to the IKE SA when it appears in the IKE Protection Profile and to the IPsec SA when it appears in the IPsec Protection Profile. |
The default value corresponds to 8 hours DPD Interval | Dpd Interval | 10-3600, or | The |
Specifies the IKE Protection Profile Dead Peer Detection test interval period in seconds. The value '0' corresponds to DPD disabled. The default is 30. | | Pfs Required |
| Enable flag to require PFS use during IPSec SA negotiation. - Disabled (default)
- Enabled
|
To Edit IKE Protection ProfilesTo edit an IKE Protection Profile: - Click the radio button next to the specific IKE Protection Profile name. The Edit Selected Ike Protection Profile window opens.
- Make any required changes and click Save at the right hand bottom of the panel to save the changes made.
To Copy an IKE Protection ProfileTo copy an IKE Protection Profile: - Click the radio button next to IKE Protection Profile you want to copy.
- Click Copy IKE Protection Profile. The Copy Selected IKE Protection Profile window opens.
- Make any required changes to the fields and click Save to save the changes.
To Delete an IKE Protection ProfileTo delete an IKE Protection Profile: - Click the radio button next to the IKE Protection Profile you want to delete.
- Click the Delete icon (X) at the end of the row.
- Confirm the deletion when prompted.
|