Avaya Configuring Integrated IP Security Instrukcja Użytkownika Pobierz pdf (Strona 21)

Overview

304111-A Rev 00

1-3

Figure 1-1. IPsec Environment: Unique Security Associations (SAs)

Between Routers

IPsec Tunnel Mode

When there is a security gateway at each end of a communication, the security

associations between the security gateways are said to be in tunnel mode. All

IPsec communications occur in tunnel mode. Tunnel mode is especially effective

for isolating and protecting enterprise traffic traveling across a public data

network as shown in Figure 1-1.

IP0088A

Security

Associations

(SAs A,B)

Security

Associations

(SAs C,A)

Security Associations

(SAs B,C)

Server

Router A

Router B Router C

Corporate

Headquarters

Host Host

Partner

Branch office

IP Security

Gateway

IP Security

Gateway

IP Security

Gateway

IPsec

Services

IPsec

Services

IPsec

Services

Public

Network

1 2 ... 16 17 18 19 20 21 22 23 24 25 26 ... 71 72

Configuring IP Security 1
Services 1
Trademarks 2
Restricted Rights Legend 2
Statement of Conditions 2
Contents 5
304111-A 7
304111-A Rev 0 11
Before You Begin 13
Text Conventions 14
Acronyms 15
How to Get Help 17
Chapter 1 19
Overview 19
IPsec Protection 20
IPsec Tunnel Mode 21
Security Protocols Overview 22
IPsec Services 23
Chapter 2 25
Getting Started with IPsec 25
Security Gateway 26
Security Policies 27
IPsec Policies 28
Inbound Policies 29
Outbound Policies 29
Security Associations 30
Security Protocols 33
Upgrading Software 35
Installation Instructions 35
304111-A Rev 00 36
Chapter 3 37
Configuring IPsec 37
Node Protection Key (NPK) 38
Generating and Using NPKs 39
Caution: 40
Changing NPKs 41
Enabling IPsec 42
Creating Policies 43
Policy Considerations 44
(continued) 46
Disabling IPsec 49
Appendix A 51
Site Manager Parameters 51
Enabling IPsec Parameters 52
IPsec Policy Parameters 52
Appendix B 57
Definitions of k Commands 57
Appendix C 59
Security Policy and Security 59
Association Examples 59
RTR 1 and RTR 2 63
RTR1 64
RTR2 64
RTR3 67
RTR4 67

Komentarze do niniejszej Instrukcji

Brak uwag

Avaya Configuring Integrated IP Security Instrukcja Użytkownika Strona 21

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Avaya Configuring Integrated IP Security