Brocade Mobility Access Point System Reference Guide (Supp Manual de usuario descargar pdf (Pagina 168)

100

101

158 Brocade Mobility Access Point System Reference Guide

53-1003100-01

7. Se le ct Add to define a new IKE Policy configuration, Edit to modify an existing configuration or

Delete to remove an existing configuration.

FIGURE 61 Profile Security - VPN IKE Policy create/modify screen (IKEv1 example)

Name

If creating a new IKE policy, assign it a name (32 character maximum) to help differentiate this

IKE configuration from others with similar parameters.

DPD Keep Alive

Configure the IKE keep alive message interval used for dead peer detection on the remote end of

the IPSec VPN tunnel. Set this value in either Seconds (10 - 3,600), Minutes (1 - 60) or Hours (1).

The default setting is 30 seconds. This setting is required for both IKEv1 and IKEV2.

Mode

If using IKEv1, use the drop-down menu to define the IKE mode as either Main or Aggressive.

IPSEC has two modes in IKEv1 for key exchanges. Aggressive mode requires 3 messages be

exchanged between the IPSEC peers to setup the SA, Main requires 6 messages. The default

setting is Main.

DPD Retries

Use the spinner control to set the maximum number of keep alive messages sent before a VPN

tunnel connection is defined as dead. The available range is from 1 - 100. The default setting is

IKE LifeTime

Set the lifetime defining how long a connection (encryption/authentication keys) should last from

successful key negotiation to expiration. Set this value in either Seconds (600 - 86,400), Minutes

(10 - 1,440), Hours (1 - 24) or Days (1). This setting is required for both IKEv1 and IKEV2.

1 2 ... 163 164 165 166 167 168 169 170 171 172 173 ... 853 854

Comentarios a estos manuales

Sin comentarios

Brocade Mobility Access Point System Reference Guide (Supp Manual de usuario Pagina 168

Comentarios a estos manuales

Relacionado con productos y manuales para Accesorios De Computador Brocade Mobility Access Point System Reference Guide (Supp