Digi TransPort LR54 - Page 201

Virtual Private Networks (VPN) IPsec
Digi TransPort WR Routers User Guide
201
1. Set the authentication mode to xauth-psk:
digi.router> ipsec 1 auth-by xauth-psk
2. Set the XAuth role to client:
digi.router> ipsec 1 xauth-role client
3. Set the username that the device will use for authentication:
digi.router> ipsec 1 xauth-username <user>
4. Set the password that the device will use for authentication:
digi.router> ipsec 1 xauth-password <password>
5. Save the configuration:
digi.router> save config
Server configuration
To configure a TransPort device as an XAuth server:
Web
1. On the menu, click Network > Networks > IPSec Tunnels.
The IPsec Tunnels page appears.
2. Click New IPsec Tunnel or click an existing network to change the authentication to XAuth.
Compete the IPsec tunnel configuration as described in Configure an IPsec tunnel.
3. At Authentication, for Authentication Mode, select XAuth and Preshared Key
authentication.
4. For XAuth Role, select Server Role.
5. Click Apply
Additionally, configure XAuth users for XAuth clients that will connect to the XAuth server. Up to ten
XAuth clients can be configured:
1. On the menu, click Network > Networks > IPSec > XAuth Users.
The IPsec XAuth Users page appears.
2. Click New XAuth User .
3. For Username and Password type the credentials that the XAuth client will use to
authenticate to the device's XAuth server.
4. For Confirm Password, retype the password.
5. Click Apply
Up to ten XAuth clients can be configured.
Command line
Note These instructions assume an IPsec tunnel has already been created. For more information, see
Configure an IPsec tunnel.