Cisco VPN 3000 User's Guide Page 145

  • Download
  • Add to my manuals
  • Print
  • Page
    / 502
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 144
Configuration | System | Tunneling Protocols | IPSec | IKE Proposals
7-21
VPN 3000 Concentrator Series User Guide
Active Proposals
The field shows the names of IKE proposals that have been configured, activated, and prioritized. As an
IPSec responder, the VPN Concentrator checks these proposals in priority order, to see if it can find one
that agrees with parameters in the initiators proposed SA.
Activating a proposal also makes it available for use wherever the Manager displays an
IKE Proposal list,
and the first active proposal appears as the default selection.
Inactive Proposals
The field shows the names of IKE proposals that have been configured but are inactive. New proposals
appear in this list when you first configure and add them. The VPN Concentrator does not use these
proposals in any IPSec negotiations, nor do they appear in
IKE Proposal lists.
Note: To configure L2TP over IPSec, you must activate
IKE-3DES-MD5-RSA. Also see the Configuration | User
Management
screens.
<< Activate
To activate an inactive IKE proposal, select it from the Inactive Proposals list and click this button. The
Manager moves the proposal to the
Active Proposals list and refreshes the screen.
>> Deactivate
To deactivate an active IKE proposal, select it from the Active Proposals list and click this button. If the
active proposal is configured on a Security Association, the Manager displays an error message; and you
must remove it from the SA before you can deactivate it. Otherwise, the Manager moves the proposal to
the
Inactive Proposals list and refreshes the screen.
Move Up / Move Down
To change the priority order of an active IKE proposal, select it from the Active Proposals list and click
Move Up or Move Down. The Manager refreshes the screen and shows the reordered Active Proposals list.
These actions move the proposal up or down one position.
Add
To configure and add a new IKE proposal to the list of Inactive Proposals, click this button. See
Configuration | System | Tunneling Protocols | IPSec | IKE Proposals | Add.
Page view 144
1 2 ... 140 141 142 143 144 145 146 147 148 149 150 ... 501 502

Comments to this Manuals

No comments