Quadro Quadro16xi Installation Guide Page 120

  • Download
  • Add to my manuals
  • Print
  • Page
    / 150
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 119
Quadro Manual II: Administrator's Guide Administrator’s Menus
Quadro2x, 2xi, Quadro4x, 4xi, Quadro16x, 16xi; (SW Version 5.2.x) 119
Shared Secret is a type of password consisting of any characters that both of the IPSec Connection partners must know. The
authentication will be done with this shared secret. All encryption functions below will remain concealed.
Please Note: It is also not recommended to start multiple road warrior connections with the Shared Secret automatic keying selected.
For multiple road warriors to be started at the same time, it is recommended to use RSA keying with Local ID and Remote ID fields
configured.
RSA requires the public RSA key of your IPSec Connection partner.
Please Note: System prevents to start a connection with Shared Secret automatic keying selected if there is already a connection with RSA
automatic keying started, and vice versa.
The Local ID requires an IP address, Quadro FQDN (Fully Qualified Domain Name) that is resolved to an IP address, or any @-ed string that is
used in the same way.
Remote ID also requires an IP address, the IPSec Connection partner’s FQDN (Fully Qualified Domain Name) that is resolved to an IP address, or
any @-ed string that is used in the same way.
The Local ID and Remote ID text fields may have the
values in one of the formats presented below:
IP address – example: 10.1.19.32.
Host name – example: vpn.epygi.com. This form
requires additional resources to resolve the host
name, therefore it is not recommended to use this
format.
@FQDN – example: @vpn.epygi.com. This form is
considered as a string, and is not being resolved. It is
recommended to use this form for most applications.
user@FQDN - example: [email protected].
This form is also considered as a string, and is not
being resolved. It has no advantages over the
previous form.
Please Note: The Local ID and Remote ID values
are mandatory for RSA selection and are optional for
Shared Secret selection. However, it is
recommended to define the Local ID and Remote ID
values for multiple road-warrior connections.
Fig. II-200: IPSec Connection Wizard - Automatic Keying Settings page
PFS (Perfect Forward Secrecy) is a procedure of system key exchange, which uses a long-term key and generates short-term keys as is required.
Thus, an attacker who acquires the long-term key can neither read previous messages that they may have captured nor read future ones.
Use IPSec Compression enables IPSec data compression. This option is displayed only if the IPSec-VPN partner supports it.
The Manual Keying page offers the following
components:
Depending on the selected encryption and authentication
services of the prior page (IPSec Connection Properties)
you will get some of the following text fields:
DES Encryption Key
3DES Encryption Key
SHA1 Authentication Key
MD5 Authentication Key
Manual keys must be entered in the hexadecimal format,
otherwise the error message “Incorrect Encryption Key”
will appear.
The SPIs (Security Parameter Index) are indices to keep
the IPSec Connection tunnels distinct. A security
association (SA) is defined by destination, protocol and
SPI. Without the SPI, connections to the same gateway
using the same protocol cannot be distinguished.
Fig. II-201: IPSec Connection Wizard - Manual Keying Settings page
Page view 119
1 2 ... 115 116 117 118 119 120 121 122 123 124 125 ... 149 150

Comments to this Manuals

No comments