McAfee SG310 Administration Manual page 279

VPN menu features
IPSec Advanced Setup wizard
Enter a unique Tunnel name. This example uses test_aggressive.
a
Leave the Enable this tunnel checkbox selected.
b
From the Local Interface list, select the interface the IPSec tunnel is to go out on. This example uses
c
the default gateway interface.
Ensure you select Aggressive mode (IKE) from the Keying list.
d
Indicate the Local address. This example uses a dynamic IP address.
e
Indicate the Remote address. This example uses a static IP address.
f
If you want to force clients to authenticate using XAUTH, select the Require XAUTH authentication
g
checkbox.
Click Next. The Local Endpoint Settings page appears
3
Figure 285 Local Endpoint Settings — Aggressive keying mode
Enter the Required Endpoint ID. This example uses remote@au. Leave the remainder of the fields at
4
their default settings.
Click Next. The Remote Endpoint Settings page appears
5
Figure 286 Local Endpoint Settings — Aggressive keying mode
Enter the IP address in the remote party's IP address field.
This example leaves the Optional Endpoint ID blank.
Click Next. The Phase 1 Settings page appears
6
McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 285).
(Figure 286).
(Figure 287).
279