Secure Computing SG300 User Manual page 234

Select the Internet interface the IPSec tunnel is to go out on. In this example, select
default gateway interface option.
Select the type of keying for the tunnel to use. In this example, select the Aggressive
mode with Automatic Keying (IKE) option.
Select the type of IPSec endpoint this SnapGear unit has. In this example, select the
static IP address option.
Select the type of IPSec endpoint the remote party has. In this example, select the
dynamic IP address option.
Select the type of authentication for the tunnel to use. In this example, select the
Preshared Secret option.
Click Next to configure the Local Endpoint Settings.
Local endpoint settings page
Leave the Optional Endpoint ID field blank in this example. It is optional because this
SnapGear unit has a static IP address. If the remote party is a SnapGear unit and an
Endpoint ID is used, it must have the form abcd@efgh. If the remote party is not a
SnapGear unit refer to the interoperability documents on the SG Knowledge Base to
determine what form it must take
(http://www.cyberguard.com/snapgear/knowledgebase.html).
Leave the Enable IP Payload Compression checkbox unchecked.
Leave the Enable Phase 1 & 2 rekeying to be initiated from my end checkbox
checked.
Click Next to configure the Remote Endpoint Settings.
Remote endpoint settings page
Enter the Required Endpoint ID of the remote party. In this example, enter the Local
Endpoint ID at the Branch Office which was: branch@office
Click Next to configure the Phase 1 Settings.
Virtual Private Networking
228