User guide

N: Encryption
314 —
revision 143
Secure
• Protocol dropdown set to ‘All’
• ID Type dropdown listbox set to ‘IP Address’
b. Enter the static IP address of the workstation.
5. Expand Server 001. With ‘My Identity’ highlighted:
a. Make sure the following options are selected:
• ‘IP Address’ in the ID Type dropdown listbox
• ‘None’ in the Select Certificate dropdown listbox
• ‘Any’ in the Name dropdown listbox
b. Click [Pre-Shared Key].
6. Click [Enter Key].
7. Enter the same key (key B) that was entered on the server in step 7 of Step 4:
Configuring SafeNet/Soft-PK Peer-to-Peer Encryption on the Server on
page 310, then click [OK].
8. With Server 001 expanded and ‘Security Policy’ highlighted, make sure
that:
• The Main Mode option is selected.
• The Enable Replay Detection checkbox is selected.
9. With Server 001 expanded and ‘Proposal 1’ beneath ‘Authentication (Phase
1)’ highlighted:
a. Make sure that the following are selected:
• ‘Pre-Shared Key’ in the Authentication Method dropdown listbox
•‘SHA-1’ in the Hash Alg dropdown listbox
• ‘Unspecified’ in the SA Life dropdown listbox
• ‘Diffie-Hellman Group 1’ in the Key Group dropdown listbox
b. In the Encrypt Alg dropdown listbox, select ‘Triple DES’.
10. With Server 001 expanded and ‘Proposal 1’ beneath ‘Key Exchange (Phase
2)’ highlighted:
a. Make sure that the following are selected: