101
GlobeSurfer
®
II 1.8 - 7.2 - 7.2 S
REFERENCE MANUAL
‘Authentication Algorithm (for ESP protocol)’
Select the authentication algorithms that GlobeSurfer
®
II will attempt to use when
negotiating with the IPSec peer.
‘Hash Algorithm (for AH protocol)’
Select the hash algorithms that GlobeSurfer
®
II will attempt to use when negotiating with
the IPSec peer.
b. Manual key definition:
Figure 6.70 Manual key definition
‘Security Parameter Index (SPI): (HEX, 100 - FFFFFFFF)’
A 32 bit value that together with an IP address and a security protocol, uniquely identifies a
particular security association. The local and remote values must be coordinated with their
respective values on the IPSec peer.
‘Use Different Encryption Keys’
Selecting this option allows you to define both local and remote algorithm keys when
defining the IPSec protocol (in the next section). IPSec Protocol Select between the ESP
and AH IPSec protocols. The screen will refresh accordingly:
•
ESP – Select the encryption and authentication algorithms, and enter the algorithm
keys in hexadecimal representation.
•
AH – Select the hash algorithm, and enter the algorithm key in hexadecimal
representation.
‘Routing’
Define the connection’s routing rules. To learn how to create routing rules, please refer to
section 6.6.7.
3.
Click ‘OK’ to save the settings.
6.6.12.3 IPSec Gateway-to-Host Scenario Connection
In order to create an IPSec connection between GlobeSurfer
®
II and a Windows host, you need to configure both
the gateway and the host. This section describes both GlobeSurfer
®
II’s configuration and a Windows XP client
configuration.
6.6.12.3.1 Configuring IPSec on GlobeSurfer
®
II
1. Click ‘Connection settings’ icon on the sidebar followed by ‘Network Connections’, the ‘Network
Connections’ screen will appear (see Figure 6.71).