Quadro SW-Version 4.1.x Guía de instalación descargar pdf (Pagina 70)

QuadroISDN Manual II: Administrator's Guide Administrator’s Menus

QuadroISDN; SW Version 4.1.x 70

• Shared Secret is a type of password consisting of any characters that both of the IPSec Connection partners must know. The authentication will

be done with this shared secret. All encryption functions below will remain concealed.

Please Note: It is also not recommended to start multiple road warrior connections with the Shared Secret automatic keying selected. For

multiple road warriors to be started at the same time, it is recommended to use RSA keying with Local ID and Remote ID fields configured.

• RSA requires the public RSA key of your IPSec Connection partner.

Please Note: System prevents to start a connection with Shared Secret automatic keying selected if there is already a connection with RSA

automatic keying started, and vice versa.

The Local ID requires an IP address, Quadro FQDN (Fully Qualified Domain Name) that is resolved to an IP address, or any @-ed string that is

used in the same way.

Remote ID also requires an IP address, the IPSec Connection partner’s FQDN (Fully Qualified Domain Name) that is resolved to an IP address, or

any @-ed string that is used in the same way.

The Local ID and Remote ID text fields may have the

values in one of the formats presented below:

• IP address – example: 10.1.19.32.

• Host name – example: vpn.epygi.com. This form

requires additional resources to resolve the host

name, therefore it is not recommended to use this

format.

• @FQDN – example: @vpn.epygi.com. This form is

considered as a string, and is not being resolved. It is

recommended to use this form for most applications.

• user@FQDN - example: [email protected]ygi.com. This

form is also considered as a string, and is not being

resolved. It has no advantages over the previous form.

Please Note: If Shared Secret is defined, the Local ID

and Remote ID may be undefined. Exceptions are cases

when NAT Traversal is enabled and/or the partner device is

a road warrior; in this case at least one of the IDs need to

be defined.

Fig. II-116: IPSec Connection Wizard - Automatic Keying Settings page

PFS (Perfect Forward Secrecy) is a procedure of system key exchange, which uses a long-term key and generates short-term keys as is required.

Thus, an attacker who acquires the long-term key can neither read previous messages that they may have captured nor read future ones.

Use IPSec Compression enables IPSec data compression. This option is displayed only if the IPSec-VPN partner supports it.

The Manual Keying page offers the following

components:

Depending on the selected encryption and authentication

services of the prior page (IPSec Connection Properties)

you will get some of the following text fields:

• DES Encryption Key

• 3DES Encryption Key

• SHA1 Authentication Key

• MD5 Authentication Key

Manual keys must be entered in the hexadecimal format,

otherwise the error message “Incorrect Encryption Key”

will appear.

The SPIs (Security Parameter Index) are indices to keep

the IPSec Connection tunnels distinct. A security

association (SA) is defined by destination, protocol and

SPI. Without the SPI, connections to the same gateway

using the same protocol cannot be distinguished.

Fig. II-117: IPSec Connection Wizard - Manual Keying Settings page

1 2 ... 65 66 67 68 69 70 71 72 73 74 75 ... 105 106

Comentarios a estos manuales

Sin comentarios

Quadro SW-Version 4.1.x Guía de instalación Pagina 70

Comentarios a estos manuales

Relacionado con productos y manuales para Sistemas premisa branch exchange (pbx) Quadro SW-Version 4.1.x