Matrix NAVAN CNX200, System Manual

Page: 234 / 1388

224 Matrix NAVAN CNX200 System Manual
• If you select Tunnel , you must configure the Allowed Local LAN IP Address .
• If you want to allow the client to access the entire LAN network, select All .
• If you want to allow the client to access to only one device in the LAN network, select Single IP and
configure the IP Address of the device.
• If you want to allow the client to access multiple devices in the LAN network, select IP Subnet .
Configure the IP Address (Network) and the Subnet.
• Click Submit .
• Click Authentication to expand.
• As the Authentication Type , select Pre-Shared Key or Certificate . The type of authentication you
select will be used along with IPSec Policy to authenticate your IPSec Client during initial negotiation.
• If you want to authenticate your Client using a key (password) during initial negotiation, which is agreed
upon by both, the Server and Client in advance, select
Pre-Shared Key .
If you select this option, you must configure the parameters Pre-shared Key and Confirm Pre-shared
Key.
• In Pre-shared Key , enter the pre-shared key you want to use to authenticate your Client.
• In Confirm Pre-shared Key , re-enter the key for confirmation.
• If you want to authenticate your IPSec Client using a digitally signed certificate in IPSec Policy, select
Certificate .
• If you select this option, select the relevant System Certificate . For more details about Certificate,
see Certificate Management topic.
If you select Certificate as the Authentication Type, the Local ID and Remote ID will display details as per
the Certificate you select.
• Select the type of Local ID of your local network which will be used as identity for your IPSec Server
during IPSec negotiation. You can select your identity either as a DNS / IP Address / E-mail :