HP StorageWorks Enterprise File Services WAN Accelerator 3.0.4 Management Console user guide (AG421-96002, March 2007)

70 CONFIGURING THE HP EFS WAN ACCELERATOR
4. Click Save to save your settings permanently or click Reset to return the settings
to their previous values.
Enabling
Encryption
You configure IP Security Protocol (IPsec) encryption to allow data to be
communicated securely between peer HP EFS WAN Accelerators in the Advanced
Networking - Encryption page.
Enabling IPsec encryption makes it difficult for a third party to view your data or pose
as a machine you expect to receive data from. To enable IPsec, you must specify at
least one encryption and authentication algorithm. Only optimized data is protected,
pass-through traffic is not.
Enabling IPsec support is optional.
IMPORTANT: You must set IPsec support on each peer HP EFS WAN Accelerator in your
network for which you want to establish a secure connection. You must also specify a shared
secret on each peer HP EFS WAN Accelerator.
NOTE: If you Network Address Translate (NAT) traffic between HP EFS WAN Accelerators,
you cannot use the IPSEC channel between the appliances because the NAT changes the packet
headers causing IPSEC to reject them.
Add New Entry Neighbor IP. Specify the in-path IP address for the neighbor appliance. When you
define a neighbor, you must specify the appliance in-path IP address, not the primary IP
address.
Neighbor Port. Specify the in-path port for the neighbor appliance. The default is 7850.
Add Peer. Click Add Peer to add a neighbor to the peer list.
Remove Selected Entries. To remove an entry, select it and click Remove Selected
Entries.
Control Description