26: Configuring IPSec
_______________________________________________________________________________________________________
_____________________________________________________________________________________________________
© Virtual Access 2017
GW1000 Series User Manual
Issue: 1.9 Page 223 of 350
Web: Local Protocol
UCI: strongswan.@connection[X].localproto
Opt: localproto
Restricts the connection to a single protocol on the local side.
Web: Local Port
UCI: strongswan.@connection[X].localport
Opt: localport
Restricts the connection to a single port on the local side.
Web: Remote Protocol
UCI:
strongswan.@connection[X].remoteproto
Opt:remoteproto
Restricts the connection to a single protocol on the remote
side.
Web: Remote Port
UCI: strongswan.@connection[X].remoteport
Opt: remoteport
Restricts the connection to a single port on the remote side.
Web: Authby
UCI: strongswan.@connection[X].authby
Opt: authby
Defines how the two secure gateways should authenticate.
Note: using aggressive mode along with PSK authentication
is unsecure and should be avoided.
For public key signatures.
For RSA digital signatures.
For Elliptic Curve DSA signatures.
Enables eXtended Authentication (XAuth) with
addition to RSA signatures.
Using extended authentication and preshared
key.
Can be used if negotiation is never to be
attempted or accepted (shunt connections).
Table 75: Information table for IP addressing settings
To Next Page
Loading...
Need help?
General