Configure Advanced Settings
4042831 Rev A
57
Field Name
Description
Identity
Allows you to enter the identity string after you have selected the
identity type using one of the following formats:
For IP address mode, use the format xxx.xxx.xxx.xxx.
For FQDN, use the format "yourdomain.com."
For email address, use the format "[email protected]."
The remote VPN endpoint on the other end of the tunnel should
match these settings for its remote endpoint settings.
Network address
type
Allows you to enter the address type for the endpoint WAN. Choose
one of the following options:
IP address
FQDN
Remote address
Allows you to enter either the IP address or the FQDN of the remote
endpoint depending on what Network Address type you selected.
IPsec Settings
With VPN tunnels, there are two phases of Security Association (SA).
Phase 1 - Phase 1 creates an Internet Key Exchange (IKE) SA.
Phase 2 - When Phase 1 is complete, Phase 2 creates one or more IPsec SAs that
are then used to key IPsec sessions.
Field
Description
Pre-shared key
Allows you to enter the Pre-shared key of the firewall identifier if one
side of the VPN tunnel is using a unique firewall.
Phase 1 DH group
Allows you to select one of following three Diffie-Hellman (DH)
encryption/decryption groups:
768 bits
1024 bits
1536 bits
Diffie-Hellman is a cryptographic technique that uses public and
private keys for encryption and decryption. The higher number of
bits selected, the more secure the connection.
