Filter
Top Products
8
336 Nokia Network Voyager for IPSO 4.0 Reference Guide
Proposal and Filters
1. Under the Proposals table, enter a name for a new proposal in the New Proposal text box.
Click either ESP or AH.
Note
If you click AH, the Encryption Alg (algorithm) must always be set to NONE. If this is not
done, an error message appears when you click Apply.
2. From the drop-down list in the Authentication Alg and Encryption Alg fields, select the
necessary algorithms. Click Apply.
3. Under the Filters table, enter a new filter name in the New Filter text box for the subnetwork
that you want to control.
4. Enter the subnet address and the mask length in the Address and Mask Length text boxes.
Note
Destination filters across multiple rules (tunnel or transport) should not overlap, although
source filters can overlap.
5. Click Apply.
The new filter information is added to the Filters list. If needed, you can then define a
protocol or a port. Defaults are assumed. Repeat this operation for as many networks you
need.
Note
Each Network Voyager page displays a maximum of 10 proposals or 10 filters. If you create
more than 10, they are continued on new pages. Access these pages by clicking the link
directly below the appropriate section. The link to more pages appears only after you create
more than 10 proposals or filters.
Skip to “Putting It All Together” if you do not plan to use a X.509 certificate and want to use
shared secret for authentication.
Trusted CA Certificates
Trusted CA certificates are the publicly available certificates of the CAs.
To select a trusted CA certificate
1. Under the Trusted CA Certificates table, enter a name in the New CA text box. Click Apply.
2. An Apply Successful message appears and the name of the CA you just entered appears in
the Trusted CA Certificates table.