Digi TransPort LR54 - Page 200

Virtual Private Networks (VPN) IPsec
Digi TransPort WR Routers User Guide
200
can act as either a XAuth client or server.
IPsec tunnel with XAuth authentication configuration
Configuring an IPsec tunnel with XAuth involves the following items:
Required configuration items
n A valid IPsec configuration.
See Configure an IPsec tunnel for more information.
n The IPsec authentication mode must be set to XAuth and Preshared Key authentication.
n The XAuth role, either client or server.
The default role is client.
If XAuth role is client
n The username and password to use for XAuth authentication.
If XAuth role is server
n XAuth clients.
XAuth clients are configured on the IPsec XAuth Users page (Network > Networks > IPsec >
XAuth Users). Up to 10 XAuth clients can be configured.
Configure an IPsec tunnel with XAuth authentication
Client configuration
To configure a TransPort device as an XAuth client:
Web
1. On the menu, click Network > Networks > IPSec > Tunnels.
The IPsec Tunnels page appears.
2. Click New IPsec Tunnel or click an existing network to change the authentication to XAuth.
Compete the IPsec tunnel configuration as described in Configure an IPsec tunnel.
3. At Authentication, for Authentication Mode, select XAuth and Preshared Key
authentication.
4. For XAuth Role, select Client Role.
5. For XAuth Identity and XAuth Password, type your XAuth credentials.
6. Click Apply
Command line
Note These instructions assume an IPsec tunnel has already been created. For more information, see
Configure an IPsec tunnel.