Create Security officer

If you have not already created a Security Officer Login you need to do so now. Please remember to keep a note of the name and password,

While logged in as manager.

add user=Arther password=wizard priv=securityofficer

Create IPsec Keys pre-shared

We are going to use preshared keys for Authentication. The key will be created on the First Firewall and then instaled on the second. Each Firewall can store a list of 65,535 keys.

show enco key
will show the keys currently in use.

Note keys can only be created and kept by a user with security officer privilages, who is using a terminal connected to the serial port on the back of the Firewall/Router.

First Firewall

Connect a terminal to serial port 0 on the back of the router.

enable system security

Create a key
create enco key=1 type=gen len=14 random

Display key :-
show enco key=1

Note the string returned, you will need it for the other firewall.

Second Firewall

Connect a terminal to serial port 0 on the back of the router.

enable system security

Create a key, the value is string returned when creating the key on the first Firewall.
create enco key=1 type=gen val=abcdefghijklmn