| 14.3 |  | Task 1 - Prepare to Configure VPN Support |
| 14.3.3 |  | Step 3 - plan for IPSec |

| Planning for IPSec is an important step in preparing for VPN connectivity:

- Select IPSec algorithms and parameters for optimal security and performance. Some IPSec parameters require the administrator to make tradeoffs between high performance and stronger security.
- Identify IPSec peer details. The IPSec connection peers must be identified by either IP addresses or hostnames.
- Determine hosts, applications, and traffic that will be part of the protected VPN traffic.
- Decide whether SAs are manually established or are established using IKE.

The goal of having defined planning steps is to gather the precise data necessary to minimize configuration errors.