How to configure Femto Ipsec-Certification method

1. Achieve Negotiation parameter with Security

AuthenticationMethod	LocalId and RemoteId	EncryptionAlgorithms
PreSharedKey	LocalTs and RemoteTs	IntegrityAlgorithms
SecGWServer1	EnableVips switch	DiffieHellmanGroupTransforms

2. Ipsec parameter Configuration

Child SA:

WAN Config: (DHCP or Static)
If vip of ipsec is enabled and DHCP is selected, a virtual ip will be allocated auto.

AMF LocalUpIPAdress should be configured same as VIP.

3. IPsec Status check

Check in webgui:

Check by commands: ipsec state:

Check by commands: ipsec statusall

Check established time: watch -n 1 "ipsec status"

4. IPsec Log

Please refer to the document for the detailed procedures and download the documentations:

Search