Administrator's Guide

Create IPsec Template
Use this page to create an IPsec template and to specify how security associations (SAs) are created
(manually or dynamically). To create an IPsec template, use the following steps:
1. Enter a unique name for the template.
2. Select an authentication type. See the item descriptions in the following table.
3. Click Next.
NOTE: The subsequent configuration pages depend on your authentication type selection (Internet
Key Exchange or Manual Keys).
Table 5-7 Create IPsec Template page
Item Description
IPsec Template Name Custom IPsec template name. This name is added to the Specify IPsec Template
page.
NOTE: The IPsec template name must be unique.
Authentication Type Select the authentication type. Hosts specified in the Address template must negotiate
IPsec security settings during a session. During negotiation, authentication must occur
to validate sender/receiver identities.
● Internet Key Exchange (default) Use Internet key exchange (IKE) protocols for
authentication and encryption and to create security associations.
◦ Version Select the IKE version (IKEv1 or IKEv2).
◦ Set IKE Defaults Select a default security profile for IKE operation. Several
predefined profiles are provided. To configure a custom security profile,
select the Specify Custom Profile option.
◦ Preview IKE Defaults View the settings for a selected IKE default security
profile.
If you select IKE for authentication and a default security profile, click Next to
display the Identity Authentication page.
●
Manual Keys Configure IPsec authentication/encryption protocols and keys
manually. Click Next to display the IPsec Protocols page.
Identity Authentication
Use this page to choose an identity authentication method:
●
Pre-Shared Key
● Certificates
●
Kerberos
Identity Authentication page items are described in the following table.
114 Chapter 5 IPsec/Firewall configuration (V.45.xx.nn.xx) ENWW