McAfee SG310 Administration Manual page 274

VPN menu features
IPSec Advanced Setup wizard
Figure 275 IPSec VPN Setup — Local Endpoint Settings page — RSA authentication
Fill in the fields.
Leave the Initiate Tunnel Negotiation checkbox selected.
a
Enter the applicable Required Endpoint ID. This example uses the UTM Firewall format and the value
b
local@corphead.
Allow the remainder of the fields to their defaults.
c
Click Next. The Remote Endpoint Settings page appears
4
Figure 276 IPSec VPN Setup — Remote Endpoint Settings page — RSA authentication
Fill in the fields.
Enter the IP address of the remote party. This example uses 1.1.1.3.
a
Enter the Required Endpoint ID. This example uses remote@branch.
b
Select an option for the RSA key length. This allows the device generated RSA public/private key pair
c
to be specified when configuring a tunnel to use RSA Digital Signatures authentication. When modifying
a tunnel using RSA Digital Signatures, this allows the option to modify the private part of the RSA key
or leave the keys unchanged. Available options are:
• 512 bits
• 1024 bits
• 1536 bits
• 2048 bits
• Custom RSA key
Note: The greater the key pair length, the longer the time required to generate the keys. It may take up to
20 minutes to generate a 2048 bit RSA key.
274 McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 276).