Dell PowerConnect W-AirWave 7.4 Manual de usuario descargar pdf (Pagina 168)

168 | Configuration Reference Dell PowerConnect W-AirWave 7.4 | Configuration Guide

Select Add to complete the creation of the Dynamic Map, or click Save to retain changes to an existing Dynamic

Map.

Advanced Services > VPN Services > IPSEC > Dynamic Map > Transform Set

VPN Services may reference IPSEC profiles. Transform sets define the encryption and hash algorithm to be used

by a dynamic map in an IPSEC profile that supports VPN Services.

Navigate to Advanced Services > VPN Services > IPSEC > Dynamic Map > Transform Set from the

navigation pane. This page displays all currently configured Transform Sets, and which Dynamic Maps reference

them.

Select Add to create a new Transform Set, or click the pencil icon next to an existing Transform Set to modify

settings. The Add/Edit Details page contains the following fields, as described in Table 94:

Other Settings

Priority Specify the priority in which this Dynamic Map should be processed in relation to

additional Dynamic Maps that may be configured and used by IPSEC profiles.

Diffie-Hellman Group Diffie-Hellman is a key agreement algorithm that allows two parties to agree upon a

shared secret, and is used within IKE to securely establish session keys. To set the

Diffie Hellman Group for the ISAKMP policy, click the Diffie Hellman Group drop-

down list and select one of the following groups:

 Group 1: 768-bit Diffie Hellman prime modulus group.

 Group 2: 1024-bit Diffie Hellman prime modulus group.

 Group 19: 256-bit random Diffie Hellman ECP modulus group.

 Group 20: 384-bit random Diffie Hellman ECP modulus group.

NOTE: ‘EC 256-bit (19)’ and ‘EC 384-bit (20)’ require an Advanced Cryptography

license and a minimum version of 6.1.0.0.

Lifetime

(300-86400 sec)

Define the lifetime in seconds for the dynamic map, when deployed in IPSEC profiles.

Transform Set 1-4 From the drop-down menu, select up to four transform sets in the sequence in which

they should be referenced by the Dynamic Map. You can add a new Transform Set by

clicking the add icon, or you can edit an existing Transform Set by clicking the pencil

icon. Refer to “Advanced Services > VPN Services > IPSEC > Dynamic Map >

Transform Set” on page 168.

Version 1 Select 1 to configure the VPN for IKEv1, or 2 for IKEv2.

Table 94 Advanced Services > VPN Services > IPSEC > Dynamic Map > Transform Set Add/Edit Details Fields and Descriptions

Field Default Description

General Settings

Folder Top Set the folder with which the Transform Set is associated. The drop-down

menu displays all folders available for association with the Transform Set.

Name Blank Enter the name of the Transform Set.

Other Settings

Encryption 168-bit 3DES-CBC Select the encryption for the transform set from the drop-down menu.

Hash Algorithm SHA (HMAC Variant) Select the hash algorithm from the drop-down menu.

Table 93 Advanced Services > VPN Services > IPSEC > Dynamic Map Add/Edit Fields and Descriptions (Continued)

Field Default Description

1 2 ... 163 164 165 166 167 168 169 170 171 172

Comentarios a estos manuales

Sin comentarios

Dell PowerConnect W-AirWave 7.4 Manual de usuario Pagina 168

Comentarios a estos manuales

Relacionado con productos y manuales para Software Dell PowerConnect W-AirWave 7.4