Field
Description
authentication. It shows the index number of this certificate and
the name under which it is saved. This field is only shown for
authentication settings based on certificates and indicates that a
certificate is essential.
Mode
Select the phase 1 mode.
Possible values:
•
**$
(default value): The Aggressive Mode is neces-
sary if one of the peers does not have a static IP address and
preshared keys are used for authentication; it requires only
three messages for configuring a secure channel.
•
, '!9#")"(
: This mode (also designated Main
Mode) requires six messages for a Diffie-Hellman key calcula-
tion and thus for configuring a secure channel, over which the
IPSec SAs can be negotiated. A condition is that both peers
have static IP addresses if preshared keys are used for au-
thentication.
Also define whether the selected mode is used exclusively
(Strict), or the peer can also propose another mode.
Local ID Type
Select the local ID type.
Possible values:
•
6- J 9 . '6J9.(
•
%, **
•
!#? **
•
0. 9. '9*"*& .(
Local ID Value
Enter the ID of your device.
For Authentication Method =
90 0"
,
;0 0
"
or
;0 %)-/"
the Use Subjectname from Certi-
ficate option is shown.
If you enable the Use Subjectname from Certificate option,
the first alternative subject name indicated in the certificate is
used, or, if none is specified, the subject name of the certificate
is used.
Funkwerk Enterprise Communications GmbH
12 VPN
funkwerk TR200aw/bw
239