Watchguard V10 User Manual page 372

CHAPTER 12: Creating a Remote User VPN Policy
4
From the Mode drop-down list, select Main.
5 Select Enable Extended User Authentication.
6
Disable NAT Traversal, if necessary (NAT Traversal is
enabled by default). For more information, see "NAT
Traversal (UDP Encapsulation)" on page 303.
7 Select an IKE transform from the list or click New to
create a new IKE transform.
The New IKE Transform dialog box appears.
8 From the Authentication Type drop-down list, select
the Authentication Type.
9 From the DH Group drop-down list, select a DH
group type.
DH (Diffie-Helman) groups enable two peer systems to publicly
exchange and agree on a shared secret key. The numbers
available on the drop-down list (768 and 1024) are the number
of bits used for exponentiation to generate private and public
keys. The larger the number, the greater the protection.
10 From the Encryption Algorithm drop-down list,
select an encryption algorithm.
11 From the Hash Algorithm drop-down list, select a
hash algorithm.
12 In the Lifetimes field, type the number of hours or
minutes that the transform will remain active.
340
.
Vcontroller