Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring the ISAKMP server
Configuring the
ISAKMP server
402
Figure 172: ISAKMP
Server window
Configuring the
ISAKMP Server
window
If you are using automatic key exchange, you will need to configure the
Internet Security Association and Key Management Protocol (ISAKMP) server
before using any automatic key VPNs. To configure the ISAKMP server, select
VPN Configuration > ISAKMP Server. The following window appears.
The ISAKMP server is used by the Sidewinder G2 to generate and exchange
keys for VPN sessions. To configure the ISAKMP server, follow the steps
below.
1 In the Burbs to Listen on box, select the burbs that will have access to the
ISAKMP server. A check mark appears next to each burb that has access
to the server.
2 To allow ISAKMP to send and receive certificates with remote peers using
the ISAKMP protocol, select the Allow Certificate Negotiation check box.
(If you de-select this option, all certificates used to authenticate remote
peers must either be in the local certificate database or be accessible via
LDAP.)
3 In the P1 Retries field, specify the number of times ISAKMP will attempt to
resend a packet for which it has not received a response.
4 In the P1 Retry Timeout field, specify the number of seconds ISAKMP will
use for an initial timeout before resending a packet.
5 In the Audit Level field, select the type of auditing that should be performed
on the ISAKMP server. The options are:
• Error—Logs only major errors.
• Normal—Logs only major errors and informational messages.
• Verbose—Logs all errors and informational messages.
• Debug—Logs all errors and informational messages. Also logs all
debug information.