H3C Technologies H3C SecPath F1000-E - Manual (Page 722)

10
The suite mode allows you to select a pre-defined encryption suite, as shown in Figure 12 .
Figure 12 IPsec proposal configuration in suite mode
Table 2 describes the IPsec proposal configuration items in suite mode.
Table 2 IPsec proposal configuration items in suite mode
Item Description
Proposal Name Type a name for the IPsec proposal.
Encryption Suite
Select an encryption suite for the proposal. An encryption suite specifies the IP packet
encapsulation mode, security protocol, and authentication and encryption algorithms to
be used.
Available encryption suites include:
• Tunnel-ESP-DES-MD5: Uses the ESP security protocol, the DES encryption
algorithm, and the MD5 authentication algorithm.
• Tunnel-ESP-3DES-MD5: Uses the ESP security protocol, the 3DES encryption
algorithm, and the MD5 authentication algorithm.
• Tunnel-AH-MD5-ESP-DES: Uses the ESP and AH security protocols successively,
making ESP use the DES encryption algorithm and perform no authentication and
making AH use the MD5 authentication algorithm
• Tunnel-AH-MD5-ESP-3DES: Uses the ESP and AH security protocols successively,
making ESP use the 3DES encryption algorithm and perform no authentication, and
making AH use the MD5 authentication algorithm.
All these suites use the tunnel mode for IP packet encapsulation.
The custom mode allows you to configure IPsec proposal parameters discretionarily, as shown in
Figure
13 .
Figure 13 IPsec proposal configuration in custom mode
Table 3 describes the IPsec proposal configuration items in custom mode.