Table of Contents
Advertisement
Figure 49: VPN Wizard - IKE Phase 1 Screen
IKE Phase 1 (IKE SA)
Local Identity
This setting must match the "Remote Identity" on the remote
VPN. Select the desired option, and enter the required data in
the "Local Identity Data" field.
This setting must match the "Local Identity" on the remote
Remote Identity
VPN. Select the desired option, and enter the required data in
the "Remote Identity Data" field.
Authentication
WAN IP Address - This is the most common method. If
selected, no input is required.
Fully Qualified Domain Name - enter the Domain Name
assigned to this device.
Fully Qualified User name - This name does not have to
a valid Internet Domain Name. E-mail addresses are often
used for this entry.
DER ANS.1 DN - This must be a DER ANS.1 Domain
Name.
IP Address - This is the most common method. If selected,
no input is required.
Fully Qualified Domain Name - enter the Domain Name
assigned to this device.
Fully Qualified User name - This name does not have to
a valid Internet Domain Name. E-mail addresses are often
used for this entry.
DER ANS.1 DN - This must be a DER ANS.1 Domain
Name.
RSA Signature requires that both VPN endpoints have
valid Certificates issued by a CA (Certification Authority).
For Pre-shared key, enter the same key value in both
endpoints. The key should be at least 8 characters (maxi-
mum is 128 characters). Note that this key is used for the
IKE SA only. The keys used for the IPsec SA are automati-
cally generated.
73
Microsoft VPN
Advertisement
Table of Contents
