Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 85

Examples of IPsec Configurations The following examples are provided and depict several scenarios for using IPsec with your PS Series group. They provide configuration settings for the array and for initiators and hosts. • Example 1: Transport mode (Host-to-Host) with certificates and PSK with Microsoft iSCSI Initiator • Example 2: Tunnel Mode (between Linux hosts) using PSK • Example 3: Tunnel Mode (between Linux hosts) using Certificate-Based Authentication • Example 4: Tunnel Mode (Host-to-Gateway) using PSK with Cisco ASA Configuration For information regarding connectivity considerations, limitations, and requirements for the various IPsec configurations, see IPsec Performance Considerations. Example 1: Transport Mode (Host-to-Host) with PSK and IPv4 Figure 10. Transport Mode (Host-to-Host) with Certificates or PSK illustrates a transport mode IPsec configuration in which one host is using IPv4 and PSK and another host is using IPv6 and certificates. Either IKEv1 or IKEv2 can be used in this configuration if supported by the host, but the example shown uses IKEv1. Figure 10. Transport Mode (Host-to-Host) with Certificates or PSK iSCSI Initiator Configuration In the example shown in Figure 10. Transport Mode (Host-to-Host) with Certificates or PSK, the host systems' iSCSI initiators are configured using the Microsoft iSCSI Initiator. The following tables show how the initiator should be configured for IPv4 and IPv6 connections. Table 18. iSCSI Initiator Configuration (IPv4) lists how the Microsoft iSCSI Initiator should be configured for the IPv4 connection shown in Figure 10. Transport Mode (Host-to-Host) with Certificates or PSK. About Group-Level Security 85