Authentication method to be used in IKE negotiations in IKE-based tunnels.
•
Pre-shared Key: IKE peers authenticate each other by computing and sending a
keyed hash of data that includes the Pre-shared Key. If the receiving peer is able
to create the same hash independently using its Pre-shared key, it knows that both
peers must share the same secret, thus authenticating the other peer. Pre-shared
keys do not scale well because each IPSec peer must be configured with the
Pre-shared key of every other peer with which it establishes a session. Check
Pre-shared Key, and enter a group name and password in the designated fields.
•
Certificate: The digital certificate is a package that contains information such as
a certificate bearer's identity: name or IP address, the certificate's serial number,
the certificate's expiration date, and a copy of the certificate bearer's public key.
The standard digital certificate format is defined in the X.509 specification. The
X.509 version 3 defines the data structure for certificates. Check Certificate and
select Default.
IKE Authentication Method
• Client — Client request for IP address and server supplies the IP addresses from
the configured address range. Select Client and enter the username and password.
• Network Extension Mode (NEM) — Clients propose their subnet for which VPN
services need to be applied on traffic between LAN behind server and subnet
proposed by client. The ezvpn client NEM mode only supports LAN IP 10.0.0.0/8,
172.16.0.0/12, or 192.168.0.0/16. Also, the LAN behind the server and client
should be in a different subnet when in NEM mode. Select NEM and select VLANs
from the drop-downs and enter the username and password.
Mode
Select a VLAN.VLAN
Enter a user name.User Name
Enter a password.User Password
Confirm password.Confirm User Password
For Advanced Settings
Enter the IP address or domain name of the back servers 1, 2 and 3.
When the connection to the primary IPSec VPN server fails, the security appliance can
start the VPN connection to the backup servers. The backup server 1 has the highest
priority and the backup server 3 has the lowest priority.
Backup Server 1, 2 and 3
Enter the time in seconds (Range 30 to 480).Peer Timeout
Step 5
Click Apply.
RV345/345P Administration Guide
90
VPN
Teleworker VPN Client
To Next Page
Loading...
Need help?
General
