H3C Technologies H3C SecPath F1000-E - Manual (Page 726)

14
Figure 17 IPsec policy configuration page
Table 5 describes the configuration items for creating an IPsec policy.
Table 5 IPsec policy configuration items
Item Description
Policy Name Type a name for the IPsec policy.
Sequence Number
Type a sequence number for the IPsec policy.
In an IPsec policy group, an IPsec policy with a smaller sequence number has a higher
priority.
Template
Select an IPsec policy template.
IMPORTANT:
If you select an IPsec policy template, all subsequent configuration items but the
aggregation setting are unavailable.
IKE Peer
Select an IKE peer for the IPsec policy.
You configure IKE peers by selecting VPN > IKE > Peer from the navigation tree.
IPSec Proposal
Select up to six IPsec proposals for the IPsec policy.
IPsec SAs can be set up only when the IPsec peers have at least one matching IPsec
proposal. If no matching IPsec proposal is available, the IPsec SAs cannot be established
and the packets that need to be protected are discarded.