Users Manual Part 2

• Encryption Algorithm
• Authentication Algorithm
• Authentication Method
• IKE SA Lifetime (hours)
•
IPSEC SA Lifetime (hours)
• Encryption of performance monitoring packets
NOTICE:
For description of parameters listed above and instruction on how to configure them, see the
TETRA BTS Service Software (TESS) User Guide.
Use the BTS Service Software tool for configuration of the Encrypted Ethernet site link,
especially during upgrade or migration procedures.
The algorithms used for encryption are:
• AES 128
• AES 192
• AES 256
The algorithms used for authentication are:
•
SHA-1
• SHA-256
• SHA-384
• SHA-512
To verify if the link encryption option is enabled or disabled in the system, use the ipsec config
command. The command displays both, the Main system and the Local system site link encryption
configuration.
SC: ipsec config
---------------------------------------------
MSO: main
encrypted sitelinks: enabled
encryption algorithm: AES256
authentication algorithm: sha1
authentication method: pre-shared key
IKE SA lifetime: 6h
IPsec SA lifetime: 1h
pm sessions encryption: disabled
---------------------------------------------
—-------------------------------------------
MSO: local
encrypted sitelinks: disabled
encryption algorithm: AES256
authentication algorithm: sha1
authentication method: pre-shared key
IKE SA lifetime: 6h
IPsec SA lifetime: 1h
pm sessions encryption: disabled
---------------------------------------------
SC:
To display statistics, execute the ipsec stats show command on the Site Controller MMI.
For more details on the Encryption configuration, see the “Link Encryption Configuration” chapter in the
Link Encryption manual.
6802800U74-AP
Chapter 13: MTS Troubleshooting
398