Robustel R3000 Quad - Page 72

Robustel R3000 Quad User Guide
RT_UG_R3000 Quad_v.3.0.0 28 May, 2017 72 / 131
Confidential
IKE Settings
Item
Description
Default
IKE DH Group
Select from “DHgroup2”, “DHgroup5”, “DHgroup14”, “DHgroup15”,
“DHgroup16”, “DHgroup17” or “DHgroup18” to be used in key negotiation
phase 1.
DHgroup2
Authentication Type
Select from “PSK”, “CA”, “xAuth PSK” and “xAuth CA” to be used in IKE
negotiation.
 PSK: Pre-shared Key
 CA: x509 Certificate Authority
 xAuth: Extended Authentication to AAA server
PSK
PSK Secret
Enter the pre-shared key.
Null
Local ID Type
Select from “Default”, “FQDN” and “User FQDN” for IKE negotiation.
 Default: Use an IP address as the ID in IKE negotiation
 FQDN: Use an FQDN type as the ID in IKE negotiation. If this option is
selected, type a name without any at sign (@) for the local security
gateway, e.g., test.robustel.com.
 User FQDN: Use a user FQDN type as the ID in IKE negotiation. If this
option is selected, type a name string with a sign “@” for the local
security gateway, e.g., test@robustel.com.
Default
Remote ID Type
Select from “Default”, “FQDN” and “User FQDN” for IKE negotiation.
 Default: Use an IP address as the ID in IKE negotiation
 FQDN: Use an FQDN type as the ID in IKE negotiation. If this option is
selected, type a name without any at sign (@) for the local security
gateway, e.g., test.robustel.com.
 User FQDN: Use a user FQDN type as the ID in IKE negotiation. If this
option is selected, type a name string with a sign “@” for the local
security gateway, e.g., test@robustel.com.
Default
IKE Lifetime
Set the lifetime in IKE negotiation. Before an SA expires, IKE negotiates a new
SA. As soon as the new SA is set up, it takes effect immediately and the old
one will be cleared automatically when it expires.
86400
Private Key Password
Enter the private key under the “CA” and “xAuth CA” authentication types.
Null
Username
Enter the username used for the “xAuth PSK” and “xAuth CA” authentication
types.
Null
Password
Enter the password used for the “xAuth PSK” and “xAuth CA” authentication
types.
Null