Security > Policies - Dell PowerConnect W-Airwave Configuration Manual

Table 58 Security > User Roles > Add VPN Dialer Field Descriptions (Continued)
Field
IKE Diffie-Hellman
Group
IKE Hash
Algorithm
IKE Authentication
IPSEC Lifetime
IPSEC Diffie
Hellman Group
IPSEC Encryption
IPSEC Hash
Algorithm
Add
Click
You return to the
Security > Policies
Security > Policies
The
cites the groups, user roles, and folders to which the security policy applies. To create a new policy, click
Add New Policy
the
Security > Policy > Add New Policy
The
Table 59 Security > Policy > Add New Policy Field Descriptions
Field
General Settings
Folder
146 | Aruba Configuration Reference
Default
1024-bit (1)
SHA
Pre-Shared
7200
1024-bit (1)
168-bit 3DES Specify the type of IPSEC encryption to support for the VPN. Options are as
SHA
VPN Dialers
to finish the new
VPN Dialers
page. The new profile appears below the
page displays all currently configured policies, to include the policy name, type, and
button. To edit an existing policy, click the pencil icon.
Top
Description
Select the IPSEC Mode Group that matches the Diffie Hellman Group
configured for the IPSEC policy. The two options are as follows:
1024-bit
768-bit
The IKE policy selections, along with the preshared key, need to be reflected
in the VPN configuration. Set the VPN configuration on clients to match the
choices made above. In case the Aruba dialer is used, these configuration
need to be made on the dialer prior to downloading the dialer onto the local
client.
Set the IKE Hash Algorithm to either SHA or MD5, to match the IKE policy for
IPSEC.
IKE Phase 1 authentication can be done with either an IKE preshared key or
digital certificates. This establishes how the client is authenticated with the
internal database on the controller.
The options are Pre-Shared Keys or RSA Signatures.
Define the IPSEC lifetime in seconds, after which a new IPSEC key is
required.
Select the IPSEC Mode Group that matches the Diffie Hellman Group
configured for the IKE policy. The two options are as follows:
1024-bit
768-bit
The IPSEC policy selections, along with the preshared key, need to be
reflected in the VPN configuration. Set the VPN configuration on clients to
match the choices made above. In case the Aruba dialer is used, these
configuration need to be made on the dialer prior to downloading the dialer
onto the local client.
follows:
Encapsulating Security Payload (ESP) with 168-bit 3DES
ESP with 56-bit DES
Set the IKE Hash Algorithm to either SHA or MD5, to match the IKE policy for
IKE Hash Algorithm.
Save
profile, or click
page contains the following fields, as described in
Description
Use this field to set and display the folder with which the policy is
associated. The drop-down menu displays all folders available for
association with the policy.
AirWave Wireless Management Suite | Configuration Guide
to complete the editing of an existing profile.
Add New VPN Dialer
button.
Table 59: