Setting Up A Tunnel With Rsa Signatures Authentication - McAfee SG310 Administration Manual

VPN menu features
IPSec Advanced Setup wizard
• Diffie-Hellman Group 15 (3072 bit)
• Diffie-Hellman Group 16 (4096 bit)
Click Finish. The tunnel is added to the Tunnel List pane, and the Status column indicates the current
8
status of the tunnel.

Setting up a tunnel with RSA signatures authentication

Use this procedure as guidance for configuring an IPSec VPN tunnel using RSA digital signatures for
authentication.
This example assumes the remote appliance is also a UTM Firewall appliance, and both appliances have
static IP addresses.
From the VPN menu, click IPSec. The IPSec VPN Setup page appears.
1
Click Advanced. The Tunnel Settings page appears
2
Figure 274 IPSec VPN Setup — Tunnel Settings page — RSA authentication
Fill in the fields.
Enter a unique Tunnel name. This example uses RSA.
a
Leave the Enable this tunnel checkbox selected.
b
From the Local Interface list, allow the Local Interface to default to the Default Gateway
c
Interface to the Internet.
Allow the Local and Remote addresses to default to Static IP Address.
d
From the Authentication list, select RSA Digital Key Signature.
e
Click Next. The Local Endpoint Settings page appears
3
McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 274).
(Figure 275).
273