H3C Technologies H3C SecPath F1000-E - Manual (Page 175)

163
Figure 109 IPsec proposal configuration wizard page
3. Click Suite mode to configure an IPsec proposal as described in Table 10 , or click Custom mode
to configure an IPsec proposal as described in Table 11 .
4. Click Apply.
Figure 110 IPsec proposal configuration in suite mode
Table 10 Configuration items in suite mode
Item Description
Proposal Name Enter a name for the IPsec proposal.
Encryption Suite
Select an encryption suite for the proposal. An encryption suite specifies the IP packet
encapsulation mode, security protocol, and authentication and encryption algorithms to
be used.
Available encryption suites include:
• Tunnel-ESP-DES-MD5—Uses the ESP security protocol, the DES encryption algorithm,
and the MD5 authentication algorithm.
• Tunnel-ESP-3DES-MD5—Uses the ESP security protocol, the 3DES encryption
algorithm, and the MD5 authentication algorithm.
• Tunnel-AH-MD5-ESP-DES—Uses the ESP and AH security protocols successively,
making ESP use the DES encryption algorithm and perform no authentication and
making AH use the MD5 authentication algorithm
• Tunnel-AH-MD5-ESP-3DES—Uses the ESP and AH security protocols successively,
making ESP use the 3DES encryption algorithm and perform no authentication, and
making AH use the MD5 authentication algorithm.
All these suites use the tunnel mode for IP packet encapsulation.
NOTE:
In FIPS mode, the firewall does not support configuring an IPsec proposal by using an
encryption suite.