Data Center Fabric Manager Professional User Manual - Supporting DCFM 10.3.x (53-1001355-01, October 2009)

DCFM Professional User Manual 251

53-1001355-01

Configuring IPSec and IKE policies

IPSec and IKE policies are configured from the Security tab (Figure 73). IPSec and IKE policy

creation is an independent procedure. These policies must be known to you before you can

configure them.

NOTE

Fabric OS version 6.3.0 does not support IPSec on the 8 Gbps 16-FC ports, 6-Gbit ports Extension

Switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade.

FIGURE 73 Advanced Settings Security tab

These policies are used to make the connection more secure through authentication and

encryption. When you select a policy for the local switch, a matching policy is automatically

selected on the remote switch. If no matching policy is found, you must manually configure the

policy on the remote switch.

If the IPSec policy is selected, you must specify the preshared key. The Preshared Key is the key to

be used during IKE/IPSec authentication. It must be between 12 and 32 alphanumeric characters.

It must also be an exact match on both switches.

NOTE

IPSec settings cannot be edited. If you want to change settings, you will need to delete the tunnel

and then create a new tunnel with the new settings.