Avaya Configuring IP Security Services Instrukcja Użytkownika Pobierz pdf (Strona 72)

Configuring IPsec Services

C-2

304111-B Rev 00

Automated SA (IKE) Policy Examples

As you review the security policy examples in this section, refer to Figure C-1.

Figure C-1. IPsec Automated Outbound Policies for RTR1, RTR2, and RTR3

• The SA pair between RTR1 and RTR2 use both 3DES and HMAC MD5, and

a default SA expiry time of 8 hours.

• The SA pair between RTR1 and RTR3 use only DES and a default SA expiry

time of 8 hours.

• The SA pair between RTR1 and RTR4 use only SHA1 and an SA expiry time

of 24 hours.

RTR1

S32

INET

S31 - 119.68.12.1

RTR3

129.43.12.19 - S28

RTR2

189.132.10.1 - S52

RTR4

192.32.1.5 - S33

192.32.5.0

192.32.10.0

192.32.20.0

192.32.30.0

S51

S27

S31

1 2 ... 67 68 69 70 71 72 73 74 75 76 77 ... 99 100

Brak uwag

Avaya Configuring IP Security Services Instrukcja Użytkownika Strona 72