IPSec Security Association Settings
PortMaster  PortMaster IP address or name on which you are configuring a security association. 
SA  Name of the security association that describes the security of communication between two nodes---up to 16 characters. 
Peer ID  ID that sets the IP address of the peer or end point of the IPSec tunnel. 
Security Filter  Filter that determines which packets are to be handed to a particular security asssociation configuration. See Configure Filters for more information about filters. 

Note - If the security asociation is atached directly to a network interface, user, or location, you do not need to set a security filter. 

Security Proposal  Protocol and encryption that are used to provide security for the security association. The protocol can be either IP authentication header (AH) or encapsulating security payload (ESP). The encryption standard can be DES, 3DES, or MD5. 
ESP Local SPI  Security parameter index for the ESP protocol used on the remote node. The destination value assigned to the local node matches the local value at the remote end. 
AH Local SPI  Security parameter index for the AH protocol used on the remote node. The local value assigned to the local node matches the destination value at the remote node. 
ESP Dest SPI  Security parameter index for the ESP protocol used on the local node---this PortMaster. The local value assigned to the local node matches the destination value at the remote node. 
AH Dest SPI  Security parameter index for the AH protocol used on the local node---this PortMaster. The destination value assigned to the local node matches the local value at the remote end.