Amer Networks E5Web GUI User Manual

Page 610

Authentication method: Pre-shared key or certificate
Group description: Diffie Hellman (DH) group
Life type: Seconds or kilobytes
Life duration: No of seconds or kilobytes
VID: The IPsec software vendor plus what standards are supported. For example, NAT-T

Step 2. Server Responds to Client

A typical response from the server is shown below. This must contain a proposal that is identical
to one of the choices from the client list above. If no match was found by the server then a "No
proposal chosen" message will be seen, tunnel setup will fail and the ikesnoop command output
will stop at this point.

IkeSnoop: Sending IKE packet to 192.168.0.10:500 Exchange type :

Identity Protection (main mode) ISAKMP Version : 1.0

Flags

: 0x6098238b67d97ea6 -> 0x5e347cb76e95a

Message ID

: 0x00000000

Packet length

: 224 bytes

# payloads

: 8

Payloads:

SA (Security Association)

Payload data length : 52 bytes
DOI : 1 (IPsec DOI)

Proposal 1/1

Protocol 1/1

Protocol ID

: ISAKMP

SPI Size

: 0

Transform 1/1

Transform ID

: IKE

Encryption algorithm

: Rijndael-cbc (aes)

Key length

: 128

Hash algorithm

: MD5

Authentication method

: Pre-Shared Key

Group description

: MODP 1024

Life type

: Seconds

Life duration

: 43200

VID (Vendor ID)