Verify IPsec negotiation by setting different Pre-shared Key & length
PROCEDURE:1 Execute CO_AUTH_WEBUI_AUTHENTICATE_SA.
2 Select [Security] followed by [IPsec] from the Properties Menu on the left side of the page.3 Click [Actions] to navigate to the IP Actions page. Then click [Add New Action] button.4 Enter the following information,when done click [Next].
Name = ”Require Preshared Key 1”
Description = N/A
Keying Method = Internet Key Exchange (IKEv1)
Pre-shared Key Passphrase = ”Please use a pre-shared key of 248 characters”
5 Select the following options then click [Save]. (Click [OK] to respond to the settings confirmation pop-up which follows).
IKE Phase 1 Settings:
Key Lifetime = 86400 Seconds
IKE Phase 2 Settings:
IPsec Mode = Transport Mode
IPsec Security = BOTH
Perfect Forward Secrecy = DH Group 14 (2048-bit MODP)
Hash = SHA-256
Encryption = AES-CBC-128/256
Key Lifetime = 28800 Seconds
6 Click [Host Groups] to display the IP Host Groups page. Then click [Add New Host Group]7 Enter the following information,when done click [Save]. (Click [OK] to respond to the settings confirmation pop-up which follows)
Name = “Windows 10 Client”
Description = N/A
Set the following address options:
IPv4
Address type = Specific
IP Address = 172.16.0.102
8 Click [Security Policies] to navigate to the IPsec Policies page.9 Create a new policy. Set the following options then click [Add Policy]. (Click [OK] to respond to the settings confirmation popup which follows)
Host Groups = Windows 10 Client
Protocol Groups = All
Action = Require Preshared Key 1
10 At Windows Workstation,enable the IPsec Policy created.
Important: Please refer the Document shared to enable IPsec on Windows 10.11 Test protocol connectivity. From the Windows workstation execute the following commands:
LPR -S 172.16.0.10 -P lp <location of 16MPS.ps>
12 Retrieve Audit log. Execute CO_AUDIT_DOWNLOAD.13 Repeat from Step 4,by modifying the Pre-shared Key Passphrase with the minimum length.
Pre-shared Key Passphrase = 'ObsidianOrder1'
14 Test protocol connectivity. From the Windows workstation execute the following commands:
LPR -S 172.16.0.10 -P lp <location of 16MPS.ps>
15 Repeat from Step 4,by modifying the Pre-shared Key Passphrase with the invalid passphrase. (i.e. mismatch passphrase between TOEnd Windows 10)
Pre-shared Key Passphrase = 'Welcome@(1234)'
16 Repeat from Step 4,by modifying the Pre-shared Key passphrase with the below combinations one by one:
See CO_AUTH_WEBUI_AUTHENTICATE_SA.The {WEBUI IPSEC PAGE} will be displayed.The {WEBUI IPSEC Add New Action Step 1 of 2 page} will be displayed.The {WEBUI IPSEC Add New Action Step 2 of 2 page} will be displayed.1. The {WEBUI IPSEC PAGE} will be displayed.