Digi TransPort WR11 User Manual page 476

Configuring Virtual Private Networking (VPN)
Security type
Preshared Keys
XAUTH Init Preshared Keys
RSA Signatures
XAUTH Init RSA
Our ID
When Aggressive mode is On, this parameter is a string of up to 20 characters. It is sent to the
remote peer to identify the initiator (such as the router). You can use the variable %s on this
parameter, which causes the router's serial number to be sent. You can prefix this value with
other text if required. When using certificates, configure this parameter with the Altname field
in a valid certificate held on the router.
Our ID type
Defines how the remote peer is to process the Our ID configuration.
ID type
IKE ID
FQDN
User FQDN
IPv4 Address
Remote ID
When Aggressive mode is On, this parameter is a string of up to 20 characters that identifies
the remote peer. This setting should use the same text as the Our ID parameter in the remote
peer's configuration. When Aggressive mode is Off, this parameter must be the IP address of
the remote peer.
Digi TransPort® Routers User Guide
Description
Requires that both IPsec peers share a secret key, or
password, that can be matched by and verified by both
peers.
To configure the PSK, a user will need configuring that
matches the inbound ID of the remote peer and the PSK is
configured using the password parameter. This is done via
Configuration > Security > Users. The User configuration
serves a dual purpose, in that it may contain entries for
normal login access (such as HTTP, FTP or Telnet), and
entries for IPsec tunnels.
Used when the remote peer is a Cisco device using XAUTH
and PSK authentication.
Select this option when the IPsec authentication will use
X.509 certificates.
Used when the remote peer is a Cisco device using XAUTH
and X.509 certificates for authentication.
Description
The Our ID parameter is a simple key ID (such as vpnclient1).
The Our ID parameter is a Fully Qualified Domain Name (such as
vpnclient1.anycompany.com)
The Our ID parameter is a Fully Qualified Domain Name with a user
element (such as joe.bloggs@anycompany.com)
An IPv4 Address in dotted decimal notation.
Configure Internet Protocol security (IPsec)
476