Datasheet

Configuring VPN

IPSec Policy

Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models) 186

STEP 6 Choose a policy type from the drop-down list. You can select from Auto or

Manual.

STEP 7 Enter the IPSec Policy settings as defined in the IPSec Policy Settings table.

STEP 8 Click Submit to save your settings.

The VPN policy appears in the List of IKE policies on the IKE Policy Add Entry

page.

IPSec Policy Settings

General Settings

Policy Name Enter a unique name for the VPN Policy.

Policy Type Choose the policy type. Select from Auto Policy or

Manual Policy.

The Auto Policy uses the IKE protocol to negotiate

random keys for more security. If you choose this option,

you must also set an IKE policy on the Site to Site IPSec

VPN > IKE Policy page The Manual Policy does not use

IKE, which makes this policy more simple, but less

secure.

Remote Endpoint Choose how you want to identify the remote gateway

for this site-to-site VPN tunnel.

Select IP Address to enter an IP address, select FQDN

to enter a Fully Qualified Domain Name, or select Any

(available only for an Auto Policy). Be aware that an

FQDN requires that the SRP can connect to a DNS

server to resolve the address before establishing the

VPN tunnel.

Encryption

Algorithm

Choose the encryption algorithm. Select from DES (8

characters), 3DES (24 characters), AES-128 (16

characters) AES192 (24 characters) and AES256

(32 characters).

Integrity Algorithm Choose an integrity algorithm. Select from MD5 (16

characters) or SHA-1 (20 characters).