D-Link DWC-1000 Instrukcja Użytkownika Pobierz pdf (Strona 123)

Wireless Controller User Manual

122

Figure 79: IPsec policy configuration

Once the tunnel type and endpoints of the tunnel are defined you can determine the

Phase 1 / Phase 2 negotiation to use for the tunnel. This is covered in the IPsec mode

setting, as the policy can be Manual or Auto. For Auto policies, the Internet Key

Exchange (IKE) protocol dynamically exchanges keys between two IPsec hosts. The

Phase 1 IKE parameters are used to define the tunnel‘s security association details.

The Phase 2 Auto policy parameters cover the security association lifetime and

encryption/authentication details of the phase 2 key negotiation.

The VPN policy is one half of the IKE/VPN policy pair required to establish an Auto

IPsec VPN tunnel. The IP addresses of the machine or machines on the two VPN

endpoints are configured here, along with the policy parameters required to secure the

tunnel

1 2 ... 118 119 120 121 122 123 124 125 126 127 128 ... 180 181

Brak uwag

D-Link DWC-1000 Instrukcja Użytkownika Strona 123