R3166-R3206-HP High-End Firewalls VPN Configuration Guide-6PW101

43
Figure 27 IPsec proposal configuration in suite mode
Table 10 IPsec proposal configuration items in suite mode
Item Descri
p
tion
Proposal Name Type the name for the IPsec proposal.
Encryption Suite
Select the encryption suite for the proposal. An encryption suite specifies the IP packet
encapsulation mode, security protocol, and authentication and encryption algorithms to
be used.
Following are the available encryption suites, of which Tunnel means that a security
protocol encapsulates IP packets in tunnel mode:
• Tunnel-ESP-DES-MD5—Uses the ESP security protocol, the DES encryption algorithm,
and the MD5 authentication algorithm.
• Tunnel-ESP-3DES-MD5—Uses the ESP security protocol, the 3DES encryption
algorithm, and the MD5 authentication algorithm.
• Tunnel-AH-MD5-ESP-DES—Uses the ESP and AH security protocols successively,
making ESP use the DES encryption algorithm and perform no authentication and
making AH use the MD5 authentication algorithm
• Tunnel-AH-MD5-ESP-3DES—Uses the ESP and AH security protocols successively,
making ESP use the 3DES encryption algorithm and perform no authentication, and
making AH use the MD5 authentication algorithm.
• Custom mode: This mode allows you to configure IPsec proposal parameters discretionarily. Figure
28 shows the IPsec proposal configuration in custom mode. Table 11 des
cribes the configuration
items in this mode.
Figure 28 IPsec proposal configuration in custom mode
Table 11 IPsec proposal configuration items in custom mode
Item Descri
p
tion
Proposal Name Type the name for the IPsec proposal.