R3166-R3206-HP High-End Firewalls VPN Configuration Guide-6PW101

47
Figure 32 IPsec policy configuration page
Table 13 IPsec policy configuration items
Item Descri
p
tion
Policy Name
Type the name for the IPsec policy.
Sequence Number
Type the sequence number for the IPsec policy.
In an IPsec policy group, an IPsec policy with a smaller sequence number has a higher
priority.
Template
Select the IPsec policy template to be referenced.
IMPORTANT:
If you select an IPsec policy template, the following configuration items are unavailable and
the IPsec policy will use the settings of the template.
IKE Peer
Select the IKE peer for the IPsec policy to reference.
Available IKE peers are those configured by selecting VPN > IKE > Peer from the
navigation tree.
IPSec Proposal
Select up to six IPsec proposals for the IPsec policy to reference.
The IKE negotiation process will search for and use the exactly matched IPsec proposal.
If no IPsec proposal is found exactly matched, the expected SAs cannot be established
and the packets that need to be protected will be discarded.