
SIP User's Manual 254 Document #: LTRT-65411
MediaPack Series
Parameter Description
format of this parameter is as follows:
[IPSEC_SPD_TABLE]
Format SPD_INDEX = IPSecMode,
IPSecPolicyRemoteIPAddress, IPSecPolicySrcPort,
IPSecPolicyDStPort,IPSecPolicyProtocol, IPSecPolicyLifeInSec,
IPSecPolicyLifeInKB, IPSecPolicyProposalEncryption_X,
IPSecPolicyProposalAuthentication_X,
IPSecPolicyKeyExchangeMethodIndex,
IPSecPolicyLocalIPAddressType,
IPSecPolicyRemoteTunnelIPAddress,
IPsecPolicyRemoteSubnetMask;
[\IPSEC_SPD_TABLE]
For example:
[IPSEC_SPD_TABLE]
Format SPD_INDEX = IPSecMode, IPSecPolicyRemoteIPAddress,
IpsecPolicySrcPort, IPSecPolicyDStPort,IPSecPolicyProtocol,
IPSecPolicyLifeInSec, IPSecPolicyProposalEncryption_0,
IPSecPolicyProposalAuthentication_0,
IPSecPolicyProposalEncryption_1,
IPSecPolicyProposalAuthentication_1,
IPSecPolicyKeyExchangeMethodIndex,
IPSecPolicyLocalIPAddressType;
IPSEC_SPD_TABLE 0 = 0, 10.11.2.21, 0, 0, 17, 900, 1,2, 2,2 ,1, 0;
[\IPSEC_SPD_TABLE]
In the example above, all packets designated to IP address
10.11.2.21 that originate from the OAMP interface (regardless of
destination and source ports) and whose protocol is UDP are
encrypted. The IPSec SPD also defines an SA lifetime of 900
seconds and two security proposals (DES/SHA1 and 3DES/SHA1).
IPsec is performed using the Transport mode.
Notes:
Each row in the table refers to a different IP destination.
To support more than one Encryption / Authentication proposal,
for each proposal specify the relevant parameters in the Format
line.
The proposal list must be contiguous.
To configure the IKE table using the Web interface, refer to
''Configuring the IPSec Table'' on page 94.
For an explanation on using ini file table parameters, refer to
''Structure of ini File Table Parameters'' on page 233.
IKE Parameters
IPSec_IKEDB_Table
This ini file table parameter configures the IKE table. The format of
this parameter is as follows:
[IPSec_IKEDB_Table]
Format IKE_DB_INDEX = IKEPolicySharedKey,
IKEPolicyProposalEncryption_X,
IKEPolicyProposalAuthentication_X,
IKEPolicyProposalDHGroup_X, IKEPolicyLifeInSec,
IKEPolicyLifeInKB, IkePolicyAuthenticationMethod;
[\IPSEC_IKEDB_TABLE]
For example:
Kommentare zu diesen Handbüchern