9.3.8. Identification Lists
Web Interface
First create an Identification List:
1.
Go to Objects > VPN Objects > ID List > Add > ID List
2.
Enter a name for the list, for example MyIDList
3.
Click OK
Then, create an ID:
1.
Go to Objects > VPN Objects > IKE ID List > Add > ID List
2.
Select MyIDList
3.
Enter a name for the ID, for example JohnDoe
4.
Select Distinguished name in the Type control
5.
Now enter:
•
Common Name: John Doe
•
Organization Name: D-Link
•
Organizational Unit: Support
•
Country: Sweden
•
Email Address: john.doe@D-Link.com
6.
Click OK
Finally, apply the Identification List to the IPsec tunnel:
1.
Go to Interfaces > IPsec
2.
Select the IPsec tunnel object of interest
3.
Under the Authentication tab, choose X.509 Certificate
4.
Select the appropriate certificate in the Root Certificate(s) and Gateway Certificate controls
5.
Select MyIDList in the Identification List
6.
Click OK
364
Chapter 9. VPN