POLICY-BASED CONFIGURATION OF INTERNET PROTOCOL SECURITY FOR A VIRTUAL PRIVATE NETWORK

摘要

A method for performing policy-based configuration of Internet Protocol Security (IPSec) for a Virtual Private Network (VPN) is provided. According to one embodiment, a policy page through which a policy, including multiple VPN settings for establishing a VPN connection, may be viewed and configured is displayed via a user interface of a source network device. The VPN settings include a type of IPSec tunnel to be established between the source network device and a peer network device. A selection regarding the type of IPSec tunnel to be used for the VPN connection is received via the user interface. The source network device requests the VPN connection be established between the source network device and the peer network device in accordance with the policy by sending a notification request to the peer network device. The notification requests includes parameter values associated with the VPN settings.

主权项

1. A method comprising:
displaying, via a user interface of a source network device, a policy page through which a policy, including a plurality of Virtual Private Network (VPN) settings for establishing a VPN connection, may be viewed and configured, the plurality of VPN settings including a type of Internet Protocol Security (IPSec) tunnel to be established between the source network device and a peer network device; receiving, via the user interface, a selection regarding the type of IPSec tunnel to be used for the VPN connection; and requesting, by the source network device, the VPN connection be established between the source network device and the peer network device in accordance with the policy by sending a notification request, including parameter values associated with the plurality of VPN settings, from the source network device to the peer network device.