Digi TransPort WR31 User Manual page 409

Configure Virtual Private Networking (VPN)
Use the following security on this tunnel
The security identities on the IPsec tunnel.
Security type
Preshared Keys
XAUTH Init Preshared Keys
RSA Signatures
XAUTH Init RSA
Our ID
When Aggressive mode is On, this parameter is a string of up to 20 characters. It is sent to the
remote peer to identify the initiator (such as the router). You can use the variable %s on this
parameter, which causes the router's serial number to be sent. You can prefix this value with
other text if required. When using certificates, configure this parameter with the Altname field in
a valid certificate held on the router.
Our ID type
Defines how the remote peer is to process the Our ID configuration.
ID type
IKE ID
FQDN
User FQDN
IPv4 Address
Remote ID
When Aggressive mode is On, this parameter is a string of up to 20 characters that identifies the
remote peer. This setting should use the same text as the Our ID parameter in the remote peer's
configuration. When Aggressive mode is Off, this parameter must be the IP address of the
remote peer.
Digi TransPort WR Routers User Guide
Description
Requires that both IPsec peers share a secret key, or password, that can be
matched by and verified by both peers.
To configure the PSK, a user will need configuring that matches the inbound
ID of the remote peer and the PSK is configured using the password
parameter. This is done via Configuration > Security > Users. The User
configuration serves a dual purpose, in that it may contain entries for normal
login access (such as HTTP, FTP or Telnet), and entries for IPsec tunnels.
Used when the remote peer is a Cisco device using XAUTH and PSK
authentication.
Select this option when the IPsec authentication will use X.509 certificates.
Used when the remote peer is a Cisco device using XAUTH and X.509
certificates for authentication.
Description
The Our ID parameter is a simple key ID (such as vpnclient1).
The Our ID parameter is a Fully Qualified Domain Name (such as
vpnclient1.anycompany.com)
The Our ID parameter is a Fully Qualified Domain Name with a user
element (such as joe.bloggs@anycompany.com)
An IPv4 Address in dotted decimal notation.
IPsec parameters
409