HP X Unified Security Platform Series Manual de usuario Pagina 218
- Pagina / 333
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Chapter 7 VPN
202 X Family LSM User’s Guide V 2.5.1
IKE Proposal Configuration Parameters: Phase 1 and 2
The following table describe the IKE Phase 1 and Phase 2 Configuration parameters. To review the
parameter descriptions for each set, see the following links:
• “IKE Phase 1 Setup:” on page 202
• “IKE Phase 2 Setup:” on page 205
Table 7–5: IKE Proposal Phase 1 and Phase 2 Configuration Parameters
Parameter Description
IKE Phase 1 Setup:
Specify the parameters the X family device uses to negotiate Phase 1 of the IKE to establish a shared,
secure connection. Phase 1 uses Aggressive Mode or Main Mode for packet exchange. The default is
Main Mode.
Proposal Name Specifies a name for the IKE proposal. When you configure an IPSec Security
Association, this name is used to select the IKE proposal to be used with the SA.
Encryption &
Integrity
Encryption and Integrity work in combination to provide the degree of security
required. Recommended combinations for IKE Phase 1 and IKE Phase 2 are
listed below in order from least secure to most secure.
• DES-CBC encryption with MD5 or SHA1 integrity (not recommended)
The following combinations are recommended combinations for IKE Phase 1:
• DES-CBC encryption with MD5 or SHA1 integrity
• 3DES-CBC (strong encryption device only) with MD5 or SHA1 integrity
• AES-CBC-128 (strong encryption device only) with SHA1 integrity
• AES-CBC-192 (strong encryption device only) with SHA1 integrity
• AES-CBC-256 (strong encryption device only) with SHA1 integrity
DES should only be used if it is supported on the remote device(s)
Note The strong encryption options are only available if the device is
configured with strong encryption. To enable strong encryption functionality
(3DES, 128-AES, 192-AES, 256-AES), install the correct Strong Encryption
Service Pack for your device available from the TMC Web site.
Diffie Hellman
Group
Diffie-Hellman is the protocol used to establish shared security, in order to
prevent unauthorized access to the key negotiation. The higher the Diffie-
Hellman Group number, the more secure the connection. For interoperability or
export restrictions, you may need to select a lower group number. Supported
groups are:
• 1 (768 bits) - This setting is not recommended
• 2 (1024 bits)
• 5 (1536 bits) (High encryption device only)
- X Family 1
- Local Security Manager 1
- User’s Guide 1
- 3Com Corporation 2
- 350 Campus Drive 2
- Marlborough, MA 01752 2
- Chapter 3. IPS Filtering 15 4
- Chapter 4. Firewall 63 4
- Chapter 6. Network 129 6
- Chapter 7. VPN 181 7
- Chapter 8. System 217 7
- Glossary 307 9
- Index 315 9
- Contents 10
- About This Guide 11
- Conventions 12
- Screen Captures 13
- Messages 13
- Related Documentation 14
- Customer Support 14
- Contact Information 15
- System Overview 17
- Core Functionality 18
- X Family Environment 19
- Local Clients 20
- System Requirements 20
- SMS Configuration 20
- LSM Navigation 21
- Logging In 22
- Logging In 23
- Figure 2–1: LSM Logon Page 23
- LSM Screen Layout 24
- Main Menu Bar 25
- Navigation 26
- Content and Functionality 27
- System Summary 28
- Log Summary 29
- Product Specifications 30
- IPS Filtering 31
- Using the IPS 32
- Security Profiles 33
- Chapter 3 IPS Filtering 34
- Managing Security Profiles 35
- Security Profile Details 36
- Security Profiles 37
- Filter Components 40
- Configuring DV Filters 41
- View DV Filters 42
- Filter Search 43
- Filters List (All Filters) 43
- Filter List Details 44
- Address 50
- Reset an Individual Filter 51
- Port Scan/Host Sweep Filters 51
- Filter Tuning 52
- Traffic Threshold Filters 54
- Traffic Threshold Details 55
- Column Definition 56
- Traffic Threshold Filters 57
- Action Sets 60
- Action Set Configurations 61
- Default Action Sets 62
- Managing Actions 63
- Rate Limit Action Set 65
- Quarantine Action Set 65
- Action Sets 67
- Notification Contacts 68
- Notification Contacts 69
- IPS Services 71
- IPS Services Page Details 72
- Preferences 75
- Adaptive Filter Configuration 76
- Click Apply 77
- Firewall 79
- Chapter 4 Firewall 80
- Default Firewall Rules 83
- Managing Firewall Rules 84
- Firewall Rules List Details 85
- Configuring Firewall Rules 87
- Configuration Notes 88
- Firewall Services 91
- Configuring Service Groups 94
- Schedules 95
- Managing Schedules 97
- Virtual Servers 98
- Virtual Servers page 99
- Configuring Virtual Servers 100
- Web Filtering 101
- How Web Filtering Works 102
- Setting Up Web Filtering 103
- Web Filtering Page 104
- Web Filtering 105
- Parameter Description 105
- Web Filter Service 106
- Custom Filter List 108
- Parameter/Function 109
- Configure URL Patterns 110
- Value Description 111
- URL Test 112
- Events: Logs, Traffic 113
- Streams, Reports 113
- Overview 114
- Alert Log 115
- Audit Log 116
- IPS Block Log 117
- Firewall Block Log 118
- Firewall Session Log 119
- Configuration 120
- System Log 121
- Managing Logs 122
- Viewing Logs 123
- Downloading a Log 123
- Resetting a log 124
- Searching a Log 125
- Managed Streams 126
- Managed Streams 127
- Field Description 127
- Rate Limited Streams 128
- Quarantined Addresses 129
- Column Description 130
- • Performance/Throughput 132
- Device Health 133
- Module Health 134
- Table 5–13: Module Health 135
- Performance/Throughput 136
- Port Health 136
- Reports 137
- Attack Reports 138
- Rate Limit Reports 139
- Traffic Reports 139
- Update report data 140
- Traffic Threshold Report 141
- Quarantine Report 141
- Firewall Reports 142
- Configuration Overview 146
- Deployment Modes 147
- Network Port Configuration 148
- Port Configuration Tasks 149
- Chapter 6 Network 150
- Security Zone Configuration 151
- Preconfigured Zones Ports 152
- Security Zone Configuration 153
- IP Interfaces 156
- Managing IP Interfaces 157
- IP Interfaces 159
- Configuring a GRE Tunnel 164
- Bridge Mode for IP Interfaces 166
- RIP for IP Interfaces 166
- RIPv1 Configuration Settings 167
- RIPv2 Configuration Settings 167
- IP Address Groups 169
- Default Gateway 172
- Routing Table 173
- Static Routes 175
- RIP Setup 176
- Routing 177
- Multicast (IGMP and PIM-DM) 179
- PIM-DM Setup 181
- DHCP Server 183
- DHCP Server Page 184
- Configure DHCP Server 185
- DHCP Relay 187
- Configuring DHCP Relay 188
- Static Reservations 190
- Network Tools 192
- DNS Lookup 193
- Find Network Path 193
- Traffic Capture 193
- Traceroute 195
- About VPN 198
- VPN Configuration Overview 199
- IPSec Configuration 200
- IPSec Status Details 201
- Chapter 7 VPN 202
- IPSec Configuration 205
- IKE Proposal 214
- IKE Proposal Details 215
- Configuring IKE Proposals 216
- IKE Proposal 217
- L2TP Configuration 224
- L2TP Status Page Details 225
- L2TP Server Configuration 226
- L2TP Configuration 227
- PPTP Configuration 228
- PPTP Server Configuration 229
- PPTP Configuration 231
- Chapter 8 System 234
- Persistent Settings 236
- Updating the TOS Software 240
- System Snapshots 243
- Time Options 245
- Figure 8–3: Time Options Page 246
- Internal CMOS Clock 247
- NTP Server 247
- Time Zones 248
- SMS/NMS 249
- High Availability 251
- How High Availability Works 252
- Email Server 257
- Syslog Servers 258
- Setup Wizard 258
- Authentication 261
- User List 262
- TOS and Local User Accounts 263
- TOS User Security Level 263
- Managing User Accounts 265
- Chapter 9 Authentication 268
- Privilege Groups 269
- X.509 Certificates 271
- CA Certificates 273
- Certificate Requests 276
- Managing Certificate Requests 278
- Local Certificates 279
- Preferences 282
- Preferences Parameter Details 283
- Browser Certificates 287
- Client Authentication Message 288
- Security Alert 289
- Certificate Authority 290
- Security Alert 291
- Invalid Certificate Name 293
- Figure A–11: HOSTS File 294
- Core Categories 298
- Gambling 299
- Hate Speech 299
- Violence 299
- Productivity Categories 300
- Advertisement 301
- Arts & Entertainment 301
- Computing & Internet 301
- Education 301
- Appendix B Web Filter Service 302
- Free 14-day Trial Period 306
- Log Formats and System 307
- Log Formats 308
- Audit Log Format 310
- Field Name Description 311
- Firewall Block Log Format 312
- Firewall Session Log Format 314
- VPN Log Format 315
- System Log Format 316
- Remote Syslog Log Format 317
- System Update Status Messages 319
- Device Maximum 321
- Parameter X5 X506 322
- Glossary 323
- X family device 328
Relacionado con productos y manuales para Redes HP X Unified Security Platform Series
Redes HP N1200 Manual de usuario
(198 paginas)
(198 paginas)
Redes HP 100Base-T Manual de instalación
(20 paginas)
(20 paginas)
(176 paginas)
Redes HP 8800 Router Series Manual de instalación
(121 paginas)
(121 paginas)
Redes HP Cooktop 10GBE Manual de usuario
(34 paginas)
(34 paginas)
Redes HP -PB 10 Manual de usuario
(112 paginas)
(112 paginas)
Redes HP 3PAR Guía de usuario
(53 paginas)
(53 paginas)
Redes HP U522 Manual de usuario
(44 paginas)
(44 paginas)
Redes HP 9200c Manual de usuario
(218 paginas)
(218 paginas)
Redes HP 480-0005-00-15 Manual de usuario
(185 paginas)
(185 paginas)
Redes HP 100VG-ANYLAN B5426-90001 Manual de usuario
(39 paginas)
(39 paginas)
Redes HP DT-10 Manual de usuario
(20 paginas)
(20 paginas)
Redes HP AD583C Manual de usuario
(132 paginas)
(132 paginas)
Redes HP E5000 Guía de inicio rápido
(2 paginas)
(2 paginas)
Redes HP Cloud OS for Moonshot Guía de usuario
(126 paginas)
(126 paginas)
Redes HP hn220w Manual de inicio rápido
(12 paginas)
(12 paginas)
Redes HP ActivCard Smart Card Manual de usuario
(24 paginas)
(24 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.055 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales