254
01-28006-0014-20041105
Fortinet Inc.
Phase 1
VPN
Phase 1 advanced options
Figure 126:Phase 1 advanced settings
Pre-shared Key
If you select Preshared Key for Authentication Method, enter the preshared
key.
The key must contain at least 6 printable characters and should only be
known by network administrators. For optimum protection against currently
known attacks, the key should consist of a minimum of 16 randomly chosen
alphanumeric characters.
The VPN peers must use the same preshared key.
Certificate
Name
If you select RSA Signature for Authentication Method, enter the name of the
digital certificate. For information on how to use digital certificates, see
“Certificates” on page 274
.
Peer Options
Depending on the Remote Gateway and Mode settings, you may have a
choice of peer options to authenticate remote dialup clients or VPN peers with
local IDs, peer IDs, or certificate names. The local ID, peer ID, or certificate
name that you specify must match the local ID, peer ID, or certificate name of
the remote client or peer for the remote client or peer to start a VPN session
with the FortiWiFi unit.
•
Select Accept any peer ID to accept the local ID or peer ID of any remote
client or VPN peer.
•
Select Accept this peer ID to accept a remote client or group that has a
particular local ID or peer ID. Enter the value.
•
Select Accept peer ID in dialup group to accept remote clients that belong
to a particular dialup group. Select the group of dialup users.
•
Select Accept this peer certificate only to accept a remote client or group
that has a particular digital certificate. The certificate must be added to the
FortiWiFi configuration through the
config user peer
CLI command
before it can be selected here. For more information, see the “config user”
chapter of the
CLI Reference Guide
. See also
“Enabling VPN access for
specific certificate holders” on page 278
.
•
Select Accept this peer certificate group only to accept a group of
certificate holders. The group must be added to the FortiWiFi configuration
through the
config user peer
and
config user peergrp
CLI
commands before it can be selected here. For more information, see the
“config user” chapter of the
CLI Reference Guide
.
Summary of Contents for Fortiwifi fortiwifi-60
Page 42: ...42 01 28006 0014 20041105 Fortinet Inc Changing the FortiWiFi firmware System status...
Page 78: ...78 01 28006 0014 20041105 Fortinet Inc Wireless MAC Filter System wireless...
Page 86: ...86 01 28006 0014 20041105 Fortinet Inc Dynamic IP System DHCP...
Page 120: ...120 01 28006 0014 20041105 Fortinet Inc Access profiles System administration...
Page 238: ...238 01 28006 0014 20041105 Fortinet Inc Protection profile Firewall...
Page 250: ...250 01 28006 0014 20041105 Fortinet Inc CLI configuration Users and authentication...
Page 326: ...326 01 28006 0014 20041105 Fortinet Inc CLI configuration Antivirus...
Page 372: ...372 01 28006 0014 20041105 Fortinet Inc CLI configuration Log Report...
Page 386: ...386 01 28006 0014 20041105 Fortinet Inc Glossary...