POLICY-BASED CONFIGURATION OF INTERNET PROTOCOL SECURITY FOR A VIRTUAL PRIVATE NETWORK

摘要

A method for performing policy-based configuration of Internet Protocol Security (IPSec) for a Virtual Private Network (VPN) is provided. According to one embodiment, a network device displays a policy page via a user interface of the network device through which a policy, including multiple VPN settings for establishing the VPN connection, is viewed and configured, the VPN settings including a type of IPSec tunnel to be established between the network device and a peer network device. The network device receives via the user interface, a selection regarding the type of IPSec tunnel to be used for the VPN connection. The network device sends a notification request, including parameter values associated with the VPN settings, to the peer network device.

主权项

1. A network device comprising
a non-transitory storage device having embodied therein one or more routines operable to facilitate policy-based configuration of Internet Protocol Security (IPSec) for a Virtual Private Network (VPN) connection; and one or more processors coupled to the non-transitory storage device and operable to execute the one or more routines to perform a method comprising: causing a policy page to be displayed to a network administrator via a user interface of the network device through which a policy, including a plurality of VPN settings for establishing the VPN connection, is viewed and configured, the plurality of VPN settings including a type of IPSec tunnel to be established between the network device and a peer network device; receiving, via the user interface, a selection regarding the type of IPSec tunnel to be used for the VPN connection; and sending a notification request, including parameter values associated with the plurality of VPN settings, to the peer network device.