Administration HiPath 3000/5000 V7 IP systems

3000sb4.fm
HiPath 3000/5000 in the LAN Network For internal use only
HG 1500 V3.0
There is, however, no option to automatically transfer such certificates to clients; every such
transfer must be manually performed – with disks, for example.
Any subsequent certificate management, such as monitoring the period of validity or allocating
certificates to client data, must also be done manually.
The HG 1500 V3.0 can create CRLs (Certificate Revocation Lists) of certificates that are considered
insecure and therefore are declared invalid before the end of the normal period of validity.
These lists must be distributed manually.
HG 1500 V3.0 can work with certificates from external CAs. However, they can also issue certificates
which can be used by other tunnel endpoints to authenticate themselves in a VPN. This
function is called "Lightweight CA" and requires a separate license.
4.5.10.5 Data Security
The HG 1500 V3.0 supports ESP to protect utility data during transmission over the VPN.
DES, Triple DES (3DES) and AES are available as encryption algorithms.
HMAC-SHA1 and HMAC-MD5 are supported as MAC algorithms (MAC – Message Authentication
Code).
The HG 1500 V3.0 supports X.509 certificates as well as DSA and RSA, two public key algorithms,
and pre-shared keys for authenticating VPN subscribers.
P31003-H3570-Y100-4-7618, 2007-10-31
4-42 HiPath 3000/5000 V7, System Description