Table of Contents
Advertisement
IPSec SAs
The IPSec SAs list shows the configured SAs that are available. The SAs are listed in the order they are
configured.
Cisco supplies default SAs that you can use or modify; see Table 13-2. See Configuration | Policy
Management | Traffic Management | Security Associations | Add
Table 13-2: Cisco-supplied default Security Associations
SA Name
Parameter
Inheritance
IPSec
Parameters
Authentication
Algorithm
Encryption
Algorithm
Encapsulation
Mode
Perfect Forward
Secrecy
Lifetime
Measurement
Data Lifetime
Time Lifetime
IKE Parameters
IKE Peer
Negotiation
Mode
Digital
Certificate
IKE Proposal
Add / Modify / Delete
To configure a new SA, click Add . The Manager opens the Configuration | Policy Management | Traffic
Management | Security Associations | Add
To modify an SA that has been configured, select the SA from the list and click Modify . The Manager
opens the Configuration | Policy Management | Traffic Management | Security Associations | Modify screen.
VPN 3000 Concentrator Series User Guide
Configuration | Policy Management | Traffic Management | Security Associations
ESP-DES-MD5
ESP-3DES-
MD5
From Rule
From Rule
ESP/MD5/
ESP/MD5/
HMAC-128
HMAC-128
DES-56
3DES-168
Tunnel
Tunnel
Disabled
Disabled
Time
Time
10000 KB
10000 KB
(not relevant)
(not relevant)
28800 sec
28800 sec
0.0.0.0
0.0.0.0
Main
Main
None (Use
None (Use
Preshared Keys)
Preshared Keys)
IKE-DES-MD5
IKE-DES-MD5
screen.
for explanations of the parameters.
ESP/IKE-3DES-
ESP-3DES-
NONE
MD5
From Rule
From Rule
ESP/MD5/
None
HMAC-128
3DES-168
3DES-168
Tunnel
Tunnel
Disabled
Disabled
Time
Time
10000 KB
10000 KB
(not relevant)
(not relevant)
28800 sec
28800 sec
0.0.0.0
0.0.0.0
Main
Main
None (Use
None (Use
Preshared Keys)
Preshared Keys)
IKE-3DES-MD5
IKE-3DES-MD5
ESP-L2TP-
TRANSPORT
From Rule
ESP/MD5/
HMAC-128
DES-56
Transport
Disabled
Time
10000 KB
(not relevant)
3600 sec
0.0.0.0
Main
None (Use
Preshared Keys)
IKE-3DES-MD5
13-21
Hide quick links:
Advertisement
Table of Contents
