Phase 1 Advanced Options - Fortinet FortiGate FortiGate-500 Administration Manual

Phase 1

Phase 1 advanced options

252
Pre-shared Key If you select Preshared Key for Authentication Method, enter the preshared
key.
The key must contain at least 6 printable characters and should only be
known by network administrators. For optimum protection against currently
known attacks, the key should consist of a minimum of 16 randomly chosen
alphanumeric characters.
The VPN peers must use the same preshared key.
Certificate If you select RSA Signature for Authentication Method, enter the name of the
digital certificate. For information on how to use digital certificates, see
Name
"Certificates" on page
Peer Options Depending on the Remote Gateway and Mode settings, you may have a
choice of peer options to authenticate remote dialup clients or VPN peers with
local IDs, peer IDs, or certificate names. The local ID, peer ID, or certificate
name that you specify must match the local ID, peer ID, or certificate name of
the remote client or peer for the remote client or peer to start a VPN session
with the FortiGate unit.
• Select Accept any peer ID to accept the local ID or peer ID of any remote
client or VPN peer.
• Select Accept this peer ID to accept a remote client or group that has a
particular local ID or peer ID. Enter the value.
• Select Accept peer ID in dialup group to accept remote clients that belong
to a particular dialup group. Select the group of dialup users.
• Select Accept this peer certificate only to accept a remote client or group
that has a particular digital certificate. The certificate must be added to the
FortiGate configuration through the config user peer CLI command
before it can be selected here. For more information, see the "config user"
chapter of the CLI Reference Guide. See also
specific certificate holders" on page
• Select Accept this peer certificate group only to accept a group of
certificate holders. The group must be added to the FortiGate
configuration through the config user peer and config user
peergrp CLI commands before it can be selected here. For more
information, see the "config user" chapter of the CLI Reference Guide.
Figure 122:Phase 1 advanced settings
01-28006-0007-20041105
272.
276.
VPN
"Enabling VPN access for
Fortinet Inc.