Avaya Configuring Integrated IP Security Bedienungsanleitung PDF herunterladen (Seite 28)

Configuring IP Security Services

2-4

304111-A Rev 00

IPsec Policies

When you create an IPsec policy, you control which packets a security gateway

protects.

Criteria Specification

IPsec software inspects IP packet headers based on the specified criteria to

determine whether a policy applies to a data packet.

You must include at least one of the following criteria, and you may specify all

three criteria in an IPsec policy:

• IP source address

• IP destination address

• Protocol

To specify the protocol criterion, you must provide the numeric value assigned to

the protocol for use over the Internet. You can specify only a single protocol value

for each policy. The protocol number is represented in the 1-byte protocol field in

an IP packet header.

To obtain a list of the numeric values assigned to various protocols, see the

Internet Assigned Numbers Authority (IANA) Web site at:

http://www.iana.org

The direct path to the list of legal values that you can specify for an IPsec policy

protocol criterion is:

http://www.isi.edu/in-notes/iana/assignments/protocol-numbers

Action Specification

A security policy may have one action specification or none. For example, if the

IPsec interface is configured with an unprotect SA for an incoming data packet,

you do not need an action specification.

The action specifications that you can include in an inbound policy are listed in

the next section; action specifications for an outbound policy are listed in

“Outbound Policies” on page 2-5.

1 2 ... 23 24 25 26 27 28 29 30 31 32 33 ... 71 72

Keine Kommentare

Avaya Configuring Integrated IP Security Bedienungsanleitung Seite 28