Vpn Configuration - Example; Viewing Vpn Status - Extreme Networks Altitude 4700 Series Product Reference Manual

Configuring Access Point Security
Diffie Hellman
Group
4 Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE Settings
screen.
5 Click Cancel to return to the VPN screen without retaining the changes made to the IKE Settings
screen.

VPN Configuration - Example

The VPN topology used in this example is as follows:
To set the configuration on the Access Points:
1 Configure the LAN1 interface by statically assigning an IP address of 10.1.1.1.

Viewing VPN Status

Use the VPN Status screen to display the status of the tunnels configured on the access point as well as
their lifetime, transmit and receive statistics. The VPN Status screen is read-only with no configurable
parameters. To configure a VPN tunnel, use the VPN configuration screen in the WAN section of the
access point menu tree.
238
Select a Diffie-Hellman Group to use. The Diffie-Hellman
key agreement protocol allows two users to exchange a
secret key over an insecure medium without any prior
secrets. Two algorithms exist, 768-bit and 1024-bit. Select
one of the following options:
• Group 1 - 768 bit—Somewhat faster than the 1024-bit
algorithm, but secure enough in most situations.
• Group 2 - 1024 bit—Somewhat slower than the 768-bit
algorithm, but much more secure and a better choice
for extremely sensitive situations.
Altitude 4700 Series Access Point Product Reference Guide