Extreme Networks Altitude 4700 Series Product Reference Manual page 236

Configuring Access Point Security
3 Configure the IKE Key Settings screen to modify the following:
Operation Mode
Local ID Type
Local ID Data
236
The Phase I protocols of IKE are based on the ISAKMP
identity-protection and aggressive exchanges. IKE main
mode refers to the identity-protection exchange, and IKE
aggressive mode refers to the aggressive exchange.
• Main—Standard IKE mode for communication and key
exchange.
• Aggressive—Aggressive mode is faster, but less secure
than Main mode. Identities are not encrypted unless
public key encryption is used. The authentication
method cannot be negotiated if the initiator chooses
public key encryption
Select the type of ID to be used for the access point end
of the SA.
• IP—Select IP if the local ID type is the IP address
specified as part of the tunnel.
• FQDN—Use FQDN if the local ID is a fully qualified
domain name (such as extremenetworks.com).
• UFQDN—Select UFQDN if the local ID is a user fully-
qualified email (such as
johndoe@extremenetworks.com).
Specify the FQDN or UFQDN based on the Local ID type
assigned.
Altitude 4700 Series Access Point Product Reference Guide