Cisco SRP521W-K9-G1 Administration Guide - Page 185

IPSec Policy, Use the IPSec Policy to con a VPN IPSec Policy. The IPSec VPN policy

Page 185 highlights

Configuring VPN IPSec Policy 7 IKE Policy Settings Field Description Enable Dead Peer (DPD) Detection To enable DPD, select Enable. The default is disabled. NOTE DPD is not required for an IKE rule, but if enabled, helps to keep the connection alive during times when there is no traffic. DPD Interval Enter an interval for DPD. This packet is sent periodically in interval seconds during no data traffic. DPD Timeout Enter a timeout (in seconds) for Dead Peer Detection (DPD). Extended Authentication XAUTH Client Enable Enable if the VPN peer requires Extended Authentication credentials. The default setting is disabled. Username/ Password Enter the credentials that the SRP uses to connect with the remote peer. IPSec Policy Use the IPSec Policy page to configure a VPN IPSec Policy. The IPSec VPN policy contains the IPSec Security Association parameters, which define the connection type and key type. STEP 1 Click VPN > Site to Site IPSec VPN > IPSec Policy. The IPSec Policy window opens. From this page you can view the existing IPSec policies, edit an IPSec policy and add an IPSec policy. You can also view the details for each policy from the IPSec Details list. STEP 2 To add an IPSec policy, click Add Entry. The IPSec Policy window opens. STEP 3 To enable the new policy, select Enable. STEP 4 Choose a policy identification number from the drop-down list. STEP 5 In the Policy Name field, enter a unique name for the IPSec policy. Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models) 185

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229

Configuring VPN
IPSec Policy
Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models)
185
7
IPSec Policy
Use the IPSec Policy page to configure a VPN IPSec Policy. The IPSec VPN policy
contains the IPSec Security Association parameters, which define the connection
type and key type.
STEP 1
Click
VPN > Site to Site IPSec VPN > IPSec Policy
. The
IPSec Policy
window
opens.
From this page you can view the existing IPSec policies, edit an IPSec policy and
add an IPSec policy. You can also view the details for each policy from the IPSec
Details list.
STEP
2
To add an IPSec policy, click
Add
Entry
. The
IPSec Policy
window opens.
STEP
3
To enable the new policy, select
Enable
.
STEP
4
Choose a policy identification number from the drop-down list.
STEP
5
In the
Policy Name
field, enter a unique name for the IPSec policy.
Enable Dead Peer
(DPD) Detection
To enable DPD, select
Enable
. The default is disabled.
NOTE
DPD is not required for an IKE rule, but if enabled,
helps to keep the connection alive during times when there is
no traffic.
DPD Interval
Enter an interval for DPD. This packet is sent periodically
in interval seconds during no data traffic.
DPD Timeout
Enter a timeout (in seconds) for Dead Peer Detection
(DPD).
Extended Authentication
XAUTH Client
Enable
Enable if the VPN peer requires Extended
Authentication credentials. The default setting is
disabled.
Username/
Password
Enter the credentials that the SRP uses to connect with
the remote peer.
IKE Policy Settings
Field
Description