Adding a Security Association

To add security association

1. Click Add to add new security association.

2. There are 3 screens to add the association. Click Save after each screen to proceed or Cancel to exit.

3. Basic - Enter the information in each screen :
   1. Security Association Name - Input a name to identify the security association

   2. Authentication Method- Choose an authentication method to establish a secure IPSec VPN.

      • IKE Using shared secret key - Selecting this option requires you to use IKE Phase 1 and 2.

      • Manual Key - Selecting this option opens IPSec SA options.

      • Certificates - Selecting this option lets you select local certificates for individual devices when creating a VPN Topology.

   3. Shared Secret Key - Password for the VPN gateway.
4. IKE Phase 1
   1. Exchange Mode - Choose the mode.
   2. Authentication - Choose the authentication.
   3. Encryption - Choose the encryption.
   4. DH Group - Choose the DH group.
   5. LifeTime - Enter IKE Phase 1 Lifetime in seconds between 120 to 9999999.
5. IKE Phase 2
   1. Protocol - Choose the protocol.
   2. Authentication - Choose the authentication.
   3. Encryption - Choose the encryption.
   4. Enable Perfect Forward Security - Check the box to enable or disable perfect forward security.
   5. LifeTime - Enter IKE Phase 2 Lifetime in seconds between 120 to 9999999.