Device Configuration 5 - 109
11. Select either the IKEv1 or IKEv2 radio button to enforce VPN key exchanges using either IKEv1 or IKEv2.
12. Refer to the following to determine whether a VPN Peer Configuration requires creation, modification or removal:
13. Select Add to define a new peer configuration, Edit to modify an existing configuration or Delete to remove an existing
peer configuration. The parameters that can de defined for the peer configuration vary depending on whether IKEv1 or IKEv2
was selected.
Figure 5-63 Profile Security - VPN Peer Configuration create/modify screen (IKEv2 example)
Name Lists the 32 character maximum name assigned to each listed peer configuration.
IP/Hostname Displays the IP address (or host address FQDN) of the IPSec VPN peer targeted for secure
tunnel connection and data transfer.
Authentication Type Lists whether the peer configuration has been defined to use pre-shared key (PSK) or RSA.
Rivest, Shamir, and Adleman (RSA) is an algorithm for public key cryptography. It’s the first
algorithm known to be suitable for signing, as well as encryption. If using IKEv2, this screen
displays both local and remote authentication, as both ends of the VPN connection require
authentication.
LocalID Lists the access point’s local identifier used within this peer configuration for an IKE
exchange with the target VPN IPSec peer.
RemoteID Displays the means the target remote peer is to be identified (string, FQDN etc.) within the
VPN tunnel.
IKE Policy Name Lists the IKEv1 or IKE v2 policy used with each listed peer configuration. If a policy requires
creation, select the Create button.
Name If creating a new peer configuration (remote gateway) for VPN tunnel connection,
assign it a name (32 character maximum) to distinguish it from others with similar
attributes.
To Next Page
Loading...
