Adding a Security Association
To add security association
- Click Add to add new security association.
-
There are 3 screens to add the association. Click Save after each screen to proceed or Cancel to exit.
- Basic - Enter the information in each screen :
- Security Association Name - Input a name to identify the security association
Authentication Method- Choose an authentication method to establish a secure IPSec VPN.
IKE Using shared secret key - Selecting this option requires you to use IKE Phase 1 and 2.
Manual Key - Selecting this option opens IPSec SA options.
Certificates - Selecting this option lets you select local certificates for individual devices when creating a VPN Topology.
- Shared Secret Key - Password for the VPN gateway.
- IKE Phase 1
- Exchange Mode - Choose the mode.
- Authentication - Choose the authentication.
- Encryption - Choose the encryption.
- DH Group - Choose the DH group.
- LifeTime - Enter IKE Phase 1 Lifetime in seconds between 120 to 9999999.
- IKE Phase 2
- Protocol - Choose the protocol.
- Authentication - Choose the authentication.
- Encryption - Choose the encryption.
- Enable Perfect Forward Security - Check the box to enable or disable perfect forward security.
- LifeTime - Enter IKE Phase 2 Lifetime in seconds between 120 to 9999999.