
Configuring IPsec Services
4-8
308630-15.1 Rev 00
Changing Existing Security Associations
To ensure the integrity of SAs, vital information such as IKE preshared keys or
manual SA shared secrets needs to be changed from time to time. You may also
want to change other settings associated with an SA.
Modifying Automated SAs (IKE)
To create a new automated SA, you must add an outbound protect policy. For
instructions, see “
Adding a Policy” on page 4-3.
To change the IKE settings for an existing automated SA on a router, complete the
following tasks:
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
Protocols
.
The Protocols menu opens.
2. Choose
IP
. The IP menu opens.
3. Choose
IKE
. The Edit IKE SA Destination window
opens. A list of SAs specifying source
and destination appears.
4. Click on the SA that you want to modify.
5. Set one or more of the following
parameters:
• SA Name
• Pre-shared Key Type
• Pre-shared Key (ascii)
• Pre-shared Key (hex)
• Expiry Value Minutes
Click on
Help
or see the parameter
descriptions beginning on page A-10
.
6. Click on
Apply
.
7. Click on
Done
. You return to the Configuration Manager
window.
Comentários a estes Manuais