BinTec RS120 Reference Manual page 340

15 VPN
326
Field
XAUTH Profile
Number of Admitted
Connections
Start Mode
Fields in the menu Advanced IP Options
Field
Public Interface
Description
Select a profile created in VPN->IPSec->XAUTH Profiles if you
wish to use this IPSec peer XAuth for authentication.
If XAuth is used together with IKE Config Mode, the transac-
tions for XAuth are carried out before the transactions for IKE
Config Mode.
Choose how many users can connect using this peer profile.
Possible values:
• (default value): Only one peer can be connected
with the data defined in this profile.
• : Several peers can be connected with the
data defined in this profile. The peer entry is duplicated for
each connection request with the data defined in this profile.
The dynamic peer configuration on the gateway must not spe-
cify a peer ID or a peer IP address. Clients connecting to the
gateway, however, must have a peer ID specified in the client
peer configuration, since the ID is still used to differentiate the
tunnels created via the dynamic peer.
The resulting gateway peer would match all incoming tunnel
requests. It is, therefore, essential to put it at the end of the
IPSec peer list on the gateway. Otherwise all peers that follow
the dynamic peer in the peer list would be inactive.
Select how the peer is to be switched to the active state.
Possible values:
• (default value): The peer is switched to the active
state by a trigger.
• : The peer is always active.
Description
Specify the public (or WAN) interface that this peer is to use to
connect to its VPN partner. If you select
, the decision as to via which interface the data traffic is
routed is made based on the current routing table. If you select
an interface, the interface is used taking into consideration the
bintec elmeg GmbH
bintec RS Series