2.2.13.2. IPsec Setting¶
2.2.13.2.1. IPsec Initial Settings¶
2.2.13.2.2. IPsec Setting items¶
Items |
Values |
Descriptions |
---|---|---|
Tunnel | (Auto-Assign) |
Tunnel name Tunnel [1-15] is automatically added in order of creation. It can not be edited. |
Name |
(Blank when newly added) (When editing and duplicating, tunnel name) |
The automatically assigned tunnel name is displayed. It can not be edited. |
Interface |
Port [ 4 - 10 ] |
Select the interface to be associated with the Tunnel to be created. |
Proposal | [aes128-sha256]、[aes192-sha256]、[aes256-sha256]、[aes128-sha384]、[aes192-sha384]、[aes256-sha384]、[aes128-sha512]、[aes192-sha512]、[aes256-sha512] | Select Proporsal to use for Phase 1.
Multiple selections possible. Up to 9 Proposal can be selected.
|
DH Group | [14], [15], [16], [17], [18], [19], [20], [21], [27], [28], [29], [30], [31] ] |
Select the DH group to be used in Phase 1.
Multiple selections possible. Up to 3 DH Group can be selected.
|
Remote Gateway | xxx.xxx.xxx.xxx | Input the IP address of the opposite interface with decimal notation. |
Pre Shared Key | (Half-width alphabetic characters & half-width numbers/symbol) |
Input the key common to the other device.
Minimum 6 characters / maximum of 128 characters can be entered.
Any two-byte characters, such as Japanese, and the following signs are unavailable.
'"? (Backslash) Space (blank)
|
Note
When multiple Proposal and DH Groups are selected, they are used in negotiation in the order in which they are set.
When IPsec VPN is used via the Internet, it is necessary to assign Global IP Address to Interface of Managed FW / UTM.
Items |
Values |
Descriptions |
---|---|---|
Proposal | [aes128-sha256]、[aes192-sha256]、[aes256-sha256]、[aes128-sha384]、[aes192-sha384]、[aes256-sha384]、[aes128-sha512]、[aes192-sha512]、[aes256-sha512] | Select Proporsal to use for Phase 2.
Multiple selections possible. Up to 9 Proposal can be selected.
|
DH Group | [14], [15], [16], [17], [18], [19], [20], [21], [27], [28], [29], [30], [31] ] |
Select the DH group to be used in Phase 2.
Multiple selections possible. Up to 3 DH Group can be selected.
|
Note
When multiple Proposal and DH Groups are selected, they are used in negotiation in the order in which they are set.
Items |
Values |
Descriptions |
---|---|---|
Comment | (Half-width alphabetic characters & half-width numbers) |
Input the comments as necessary. You can not use the two-byte characters such as Japanese, within 225 words. |
2.2.13.2.3. IPsec Setting Addition¶
Note
Be sure to perform [Apply configuration] of the IPsec Setting object before setting ": doc:` 4902 _ ipsec_routing` ": doc:` 4903 _ ipsec_policy` ".
The status of IPsec can be confirmed with ": doc:` 4007 _ ipsec_status_view``.
2.2.13.2.4. IPsec Setting Change (Update / Copy / Delete)¶
Buttons |
Descriptions |
---|---|
Edit |
Modify the value at IPsec Setting that has already been set. |
Duplicate |
The tunnel name Tunnel [1-15] is automatically newly added and the object setting screen with the same value as the original setting is opened.
This is useful for you to define the another IPsec Setting with the same value.
|
Remove |
Remove your selected IPsec Setting . |
Note
You can NOT remove any object, which has been utilizing at a IPsec Routing/Policy.
Note
Be sure to perform [Apply configuration] of the IPsec Setting object before setting ": doc:` 4902 _ ipsec_routing` ": doc:` 4903 _ ipsec_policy` ".
The status of IPsec can be confirmed with ": doc:` 4007 _ ipsec_status_view``.