Planning for IKE and IPSec
| The most important part of any IPSec implementation comes in the planning stage. You should define all parameters and policies on paper. You must know the IPSec gateways, the Phase 1 parameters to use, and the Phase 2 parameters to use, define what is interesting traffic, and define what interfaces IPSec will be applied to. The goal is to minimize any misconfiguration when you configure actual implementation commands on your router. A typical security policy would identify items such as those in Table 8.1. Table 8.1. IPSec Peer Policies
|
