Avaya Configuring IP Security Services Bedienungsanleitung PDF herunterladen (Seite 26)

Configuring IPsec Services

1-8

304111-B Rev 00

Security Policies

When you create an IPsec policy, you control which packets a security gateway

protects, how it handles packets to or from particular addresses or in a particular

protocol, and whether it logs information about these actions.

There are two types of IPsec policies: inbound and outbound. An inbound policy

is used for data packets arriving at a security gateway, and an outbound policy is

used for data packets leaving a security gateway. Each IPsec interface can support

up to 127 inbound and 127 outbound security policies (refer to Figure 1-3

page 1-7

The criteria (“selectors”) and action specifications used in your inbound and

outbound policies are stored in the security policy database (SPD).

IPsec defaults in favor of more security rather than less. If an outbound or inbound

packet does not match the criteria of any configured outbound or inbound policy

in the SPD, the packet is dropped.

IPsec discards any outbound clear-text data packet unless you explicitly configure

a policy to bypass or protect it.

Policy Templates

Every IPsec policy is based on a policy template. A policy template is a predefined

policy definition that you can use on any IP interface. The template specifies one

or more criteria and an action to apply to incoming or outgoing data packets.

A policy template and every policy based on it must include at least one criterion,

for example, an IP source address, and one action. For example, an outbound

policy might specify a protect action. A policy template or policy may include two

actions if one of the actions is logging. The criterion specification determines

whether a data packet matches a particular security policy, and the action specifies

how the policy is applied to the packet.

The action specifications that you can include in inbound and outbound policies

are listed in the two sections that follow.

1 2 ... 21 22 23 24 25 26 27 28 29 30 31 ... 99 100

Keine Kommentare

Avaya Configuring IP Security Services Bedienungsanleitung Seite 26