Authentication With Certificates; Authentication With Ca Certificate And Own Certificate - MB Connect Line mbNET MDH810 Manual

19.3.7

Authentication with certificates

1. Each subscriber needs the same root CA and a personal certificate signed by the root CA.
There are three different types of authentication with certificates:
3. Like 2, but without a personal certificate. In other words, the stations only need a root CA and
username/password.
19.3.7.1

Authentication with CA certificate and own certificate

Tab
X.509 authentication
Page 182 of 226
Version: 3.3.5 – DR05 – 23.03.2017
Label
CA Certificate
Own Certificate
Additional user and pass-
word verification
User
Use only CA and Us-
er/password for client verifi-
cation
Peer must be TLS Server
al username/password verification.
Description
This is the root certificate (root CA). All other cer-
tificates must come from this certificate.
You use this certificate to authenticate yourself to
your VPN peer.
Additional user data may be required from a client
dialing in. Please note that this user data must be
entered in the VPN server under System User.
Enter the user data of the VPN server (from the
System User menu) here.
With this option, you authenticate yourself using
the CA certificate and the user data of the VPN
server (from the System User menu) only.
This is an additional security option. The "server
certificate" must include the extension nsCert-
Type=server (see section
2. Like 1, but with addition-
Creating certificates).