You are here: Webhelp 5.5R7 > VPN > IPSec VPN > Configuring an IKE VPN

Configuring an IKE VPN

IKE auto negotiation method is comparatively simple. You only need to configure information of IKE negotiation and leave the rest jobs of creating and maintaining SA to the IKE auto negotiation function. This method is for medium and large dynamic network. Establishing SA by IKE auto negotiation consists of two phases. The Phase 1 negotiates and creates a communication channel (ISAKMP SA) and authenticates the channel to provide confidentiality, data integrity and data source authentication services for further IKE communication; the Phase 2 creates IPSec SA using the established ISAKMP. Establishing SA in two phases can speed up key exchanging.

To configure an IKE VPN, you need to confirm the Phase 1 proposal, the Phase 2 proposal, and the VPN peer. After confirming these three contents, you can proceed with the configuration of IKE VPN settings.

Configuring a Phase 1 Proposal

The P1 proposal is used to negotiate the IKE SA. To configure a P1 proposal, take the following steps:

  1. Select Network > VPN > IPSec VPN.
  2. In the P1 Proposal tab, click New.

  3. Click OK to save the settings.

Configuring a Phase 2 Proposal

The P2 proposal is used to negotiate the IPSec SA. To configure a P2 proposal, take the following steps:

  1. Select Network > VPN > IPSec VPN.
  2. In the P2 Proposal tab, click New.

  3. Click OK to save the settings.

Configuring a VPN Peer

To configure a VPN peer, take the following steps:

  1. Select Network > VPN > IPSec VPN.
  2. In the VPN Peer List tab, click New.

  3. If necessary, click the Advanced Configuration tab to configure some advanced options.

  4. Click OK to save the settings.

Configuring an IKE VPN

Use IKE to negotiate IPSec SA automatically. To configure IKE VPN, take the following steps:

  1. Select Network > VPN > IPSec VPN.
  2. In the IKE VPN List tab, click New.
  3. If necessary, click the Advanced Configuration tab to configure some advanced options.

  4. Click OK to save the settings.