NEC ZA-SA3500G Function Manual page 210

IKE Mode
Local ID Setting
Local ID
Remote ID Setting
210 Setting/Setting
• Main mode: select when the IP
address of both the IPsec tunnel and
this product's IPsec peer device has a
fixed value
• Aggressive mode: select when the IP
address of either this product or its
IPsec peer device, or the IPsec tunnel
is undefined.
Set the input format of ID payload of
the device sent at IKE phase 1.
• Default (Source IP address): if the IP
address of the WAN interface of this
product is used.
• IP address: IP address format
• FQDN: Domain name
• Key-ID: Random character string
• User-FQDN: Domain name with a user
name
Set ID according to the format of the
selected "Local ID Setting".
• IP address: IP address format
• FQDN: Set in domain name format.
Character string can be 1~64
alphanumeric characters.
• Key-ID: Character string can be 1~47
alphanumeric characters.
• User-FQDN: Set in the form
"username@domainname". Character
string can be 3~160 alphanumeric
characters.
*ASCII (0x21~0x7e) characters can be
used for "FQDN", "Key-ID", "User-
FQDN" except the following: " ' ` #
\ $ = ?<space>
Set the input format of ID payload of
this product's IPsec peer device to send
at IKE phase 1.
• Default (Destination IP address): if
the IP address of the IPsec peer
device is used. This will not be used if
the IP address is not fixed.
• IP address: IP address format
• FQDN: Domain name
Confirmation|
The fixed key method is
not supported.
Sample input
IP address: 192.0.2.3
FQDN: local.example.com
Key-ID: LocalID-1
User-FQDN:
user@example.com
Main mode
Default
(Source IP
address)
Not set
Default
(Destination IP
address)