Setting up IPsec

Before you can use IPsec, you must do the following:

Create a preshared key and store it on the filer and the client that will be sharing the secure connection. The preshared key is an ASCII text string that is used to authenticate the client and filer when IPsec negotiations occur.
Enable IPsec functionality on the filer.

To create and store the preshared key on the filer, complete the following steps.

Step	Action
1	Create a psk.txt file in the etc directory.
2	Create an ASCII text key that you will use for authenticating client and filer.
3	In the psk.txt file, add a line using the following format: ip_address tab key ip_address is the IP address of the filer. key is the preshared key you created. Example `172.25.102.81 ag8key`

Step

Action

Create a psk.txt file in the etc directory.

Create an ASCII text key that you will use for authenticating client and filer.

In the psk.txt file, add a line using the following format:

ip_address tab key

ip_address is the IP address of the filer.

key is the preshared key you created.

172.25.102.81 ag8key

You will need to entering the preshared key on the client when you configure a policy using the Windows user interface.

To enable or disable IPsec on a filer, complete the following step.

Step	Action
1	Enter the following command: options ip.ipsec.enable on \| off `on` enables IPsec. `off` disables IPsec.