TMS zl Management and Configuration Guide ST.1.1.100226

7-395
Virtual Private Networks
Configure IPSecuritas (Macintosh VPN Client)
Key Exchange Mode Main or Aggressive, as configured in step 14e on page 7-388 Add IKE Policy—Step 2 of 3
Authentication
Method
Preshared Key
Preshared Key Same key as configured in step 17 on page 7-390
Diffie-Hellman (DH)
Group
Matches the setting configured in step 14b on page 7-388
Encryption Algorithm Matches the setting configured in step 14c on page 7-388
Authentication
Algorithm
Matches the setting configured in step 14d on page 7-388
SA Lifetime in
seconds
Matches the setting configured in step 14a on page 7-388
XAUTH Configuration Disable XAUTH Add IKE Policy—Step 3 of 3
IPsec proposal
Encapsulation Mode Tunnel Add IPsec Proposal
Protocol ESP
Encryption Algorithm
(if you selected ESP)
Matches the setting configured in step c on page 7-389
Authentication
Algorithm
Matches the setting configured in step d on page 7-389
IPsec policy
Action Apply Add IPsec Policy—Step 1 of 4
Position Any but last
Protocol Any
Local Address Matches the setting configured in step 13b on page 7-388
Remote Address Matches the setting configured in step 13a on page 7-387
Proposal The IPsec proposal that you configured for the Macintosh clients
IKEv1 Policy The client-to-site IKE policy that you configured for the
Macintosh clients
Add IPsec Policy—Step 2 of 4
Enable PFS (Perfect
Forward Secrecy) for
keys
Matches the setting configured in step 16b on page 7-389
Diffie-Hellman (DH)
Group (if you enabled
PFS)
Matches the setting configured in step 16b on page 7-389
SA Lifetime in
Seconds
Matches the setting configured in step 16a on page 7-389
SA Lifetime in
Kilobytes
Matches the setting configured in step 16a on page 7-389
Parameter Valid Settings Configuration Window