Digi TX54 User Manual page 295

Virtual Private Networks (VPN)
13. Click to expand Authentication.
a. For Authentication type, select one of the following:
n
n
n
n
14. (Optional) For Management Priority, set the priority for this IPsec tunnel.
15. (Optional) To configure the device to connect to its remote peer as an XAUTH client:
a. Click to expand XAUTH client.
b. Click Enable.
TX54 User Guide
Pre-shared key: Uses a pre-shared key (PSK) to authenticate with the remote
peer.
i. Type the Pre-shared key.
RSA signature: Uses a private RSA key to authenticate with the remote peer.
i. For Private key, paste the device's private RSA key in PEM format.
ii. Type the Private key passphrase that is used to decrypt the private key.
Leave blank if the private key is not encrypted.
iii. For Peer public key, paste the peer's public RSA key in PEM format.
SCEP certificates: Uses Simple Certificate Enrollment Protocol (SCEP) to download
a private key, certificates, and an optional Certificate Revocation List (CRL) to the
TX54 device from a SCEP server.
You must create the SCEP client prior to configuring the IPsec tunnel. See
a Simple Certificate Enrollment Protocol client
i. For SCEP Client, select the SCEP client.
X.509 certificate: Uses private key and X.509 certificates to authenticate with the
remote peer.
i. For Private key, paste the device's private RSA key in PEM format.
ii. Type the Private key passphrase that is used to decrypt the private key.
Leave blank if the private key is not encrypted.
iii. For Certificate, paste the local X.509 certificate in PEM format.
iv. For Peer verification, select either:
Peer certificate: For Peer certificate, paste the peer's X.509 certificate in
l
PEM format.
Certificate Authority: For Certificate Authority chain, paste the
l
Certificate Authority (CA) certificates. These must include all peer
certificates in the chain up to the root CA certificate, in PEM format.
for instructions.
IPsec
Configure
295