3Com
®
VCX V7111 VoIP Gateway User Guide
323
IPSec
IPSec is responsible for encrypting and decrypting the IP streams.
The IPSec Security Policy Database (SPD) table defines up to 20 IP peers to which the
IPSec security is applied. IPSec can be applied to all packets designated to a specific IP
address or to a specific IP address, port (source or destination) and protocol type.
Each outgoing packet is analyzed and compared to the SPD table. The packet's destination
IP address (and optionally, destination port, source port and protocol type) are compared to
each entry in the table. If a match is found, the gateway checks if an SA already exists for
this entry. If it does not, the IKE protocol is invoked (see
IKE
) and an IPSec SA is
established. The packet is encrypted and transmitted. If a match is not found, the packet is
transmitted un-encrypted.
An incoming packet, whose parameters match one of the entries of the SPD table,
but received un-encrypted is dropped.
IPSec specifications include:
Transport mode only
Encapsulation Security Payload (ESP) only
Support for Cipher Block Chaining (CBC)
Supported IPSec SA encryption algorithms – DES, 3DES, and AES
Hash types for IPSec SA are SHA1 and MD5
Configuring the IPSec and IKE
To enable IPSec and IKE on the gateway set the
ini
file parameter EnableIPSec to 1.
IKE Configuration
The parameters described in
Table 92
are used to configure the first phase (main mode) of
the IKE negotiation for a specific peer. A different set of parameters can be configured for
each of the 20 available peers.
Up to two IKE main mode proposals (Encryption / Authentication / DH group combinations)
can be defined. The same proposals must be configured for all peers.
Summary of Contents for VCX V7111
Page 30: ...30 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 44: ...44 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 53: ...3Com VCX V7111 VoIP Gateway User Guide 53 Readers Notes ...
Page 54: ...54 3Com VCX V7111 VoIP Gateway User Guide ...
Page 211: ...3Com VCX V7111 VoIP Gateway User Guide 211 Figure 76 IP Connectivity Screen ...
Page 235: ...3Com VCX V7111 VoIP Gateway User Guide 235 Readers Notes ...
Page 236: ...236 3Com VCX V7111 VoIP Gateway User Guide ...
Page 240: ...240 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 245: ...3Com VCX V7111 VoIP Gateway User Guide 245 Readers Notes ...
Page 246: ...246 3Com VCX V7111 VoIP Gateway User Guide ...
Page 281: ...3Com VCX V7111 VoIP Gateway User Guide 281 Readers Notes ...
Page 282: ...282 3Com VCX V7111 VoIP Gateway User Guide ...
Page 298: ...298 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 315: ...3Com VCX V7111 VoIP Gateway User Guide 315 Readers Notes ...
Page 316: ...316 3Com VCX V7111 VoIP Gateway User Guide ...
Page 319: ...3Com VCX V7111 VoIP Gateway User Guide 319 Readers Notes ...
Page 320: ...320 3Com VCX V7111 VoIP Gateway User Guide ...
Page 346: ...346 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 351: ...3Com VCX V7111 VoIP Gateway User Guide 351 Readers Notes ...
Page 352: ...352 3Com VCX V7111 VoIP Gateway User Guide ...
Page 376: ...376 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 386: ...386 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 394: ...394 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 396: ...396 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 405: ...3Com VCX V7111 VoIP Gateway User Guide 405 Reader s Notes ...
Page 406: ...406 3Com VCX V7111 VoIP Gateway User Guide ...
Page 410: ...410 3Com VCX V7111 VoIP Gateway User Guide ...
Page 426: ...426 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 432: ...432 3Com VCX V7111 VoIP Gateway User Guide Figure 153 Prerecorded Tones Screen ...
Page 452: ...452 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 456: ...456 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...