Filter
Top Products
Setting up Wireless Data Privacy
The fields and settings under the Configuration for IPSEc heading of the Wireless Data Privacy tab are as
follows:
Table 7-1. IPSec configuration settings
Field Description
IKE Authentication Method Select the IKE Authentication Method you plan to use:
• To use certificate-based authentication, click Public Key Certificate.
If you elect to use this method, you will need to configure a public key
certificate. You can do this under the Certificates tab after you have
finished with the IPSec setup. See —IPSec Certificate Configuration“ on
page 7-5 for details on setting up these certificates.
• To use shared secret-based authentication, click IPSec shared secret, and
type and confirm your shared secret in the fields provided.
This defines a shared secret to give to your IPSec users so that their IPSec
client software can prove they are authorized to use an IPSec connection.
The shared secret must be a minimum of five characters.
Note: The IPSec shared secret must be known by every IPSec client. Using a
shared secret makes the system vulnerable to man-in-the-middle attacks.
Therefore this method is not recommended. It is provided as a convenience for
sites who cannot or choose not to use certificate-based authentication.
IKE Encryption Select the appropriate IKE encryption algorithms. The 700wl Series system
supports the following algorithms:
• DES
• 3DES
• Blowfish
• CAST
The default is DES and 3DES selected.
IKE Integrity Select the appropriate IKE integrity algorithms. The 700wl Series system
supports the following algorithms:
• SHA-1
• MD5
The default is both SHA-1 and MD5 selected.
IKE Diffie-Hellman Select the appropriate IKE Diffie-Hellman algorithms. The 700wl Series system
supports Groups 1, 2, and 5:
The default is Group 1 and 2 selected.
Note: If more than one group is selected, the 700wl Series system will not
accept any client requests to do Aggressive Mode negotiation.
7-4 HP ProCurve Secure Access 700wl Series Management and Configuration Guide