Matrix NAVAN CNX200, System Manual

Page: 252 / 1388

242 Matrix NAVAN CNX200 System Manual
• If you want to authenticate your Client using a key (password) during initial negotiation, which is agreed
upon by both Server and Client in advance, select
Pre-Shared Key .
If you select this option, you must configure the parameters Pre-shared Key and Confirm Pre-shared
Key.
• In Pre-shared Key , enter the pre-shared key you want to use to authenticate your Server.
• In Confirm Pre-shared Key , re-enter the key for confirmation.
• If you want to authenticate your L2TP over IPSec Server using a digitally signed certificate in IPSec
Policy, select
Certificate .
• If you select this option, select the relevant System Certificate . For detailed information, see
“Certificate Management”.
If you select Certificate as the Authentication Type, you do not need to configure the Local ID and Remote
ID. These will be displayed as configured in the Certificate you select.
• Select the type of Local ID of your local network which will be used as identity by your L2TP over
IPSec Client during the IPSec negotiation. You can select your identity either as a DNS / IP Address /
E-mail :
• a DNS (domain name), for example: rnddomain.com
• an IP Address, for example: 191.100.200.5
• an E-mail, for example: support@matrixcomsec.com
The Local ID of a Client should match with the ID configured as Remote ID of its Server.
• Select the type of Remote ID (identity) of your remote L2TP over IPSec Server which is expected to be
received by your L2TP over IPSec Client during IPSec negotiation. You can select the identity of your
Client either as a DNS / IP Address / E-mail :
• a DNS (domain name), for example: myserver.com
• an IP Address, for example: 195.100.203.2
• an E-mail, for example: customer.care@matrixcomsec.com
The Remote ID of a Client should match with the ID configured as Local ID of its Server.
• If you select IP Address as the Local ID and Remote ID option, make sure the IP Address is a
Public IP Address/WAN IP Address.
• The options for Local ID and Remote ID will depend on the type of Authentication Mode selected
under IPSec Policy. For detailed information, see
“Creating an IPSec Policy” .
• The Remote ID is configured for each Tunnel. Make sure it is unique for each tunnel.
• Make sure the type you select for the Local ID and Remote ID are same, that is, if you select an IP
Address as the type in Local ID, make sure the type selected in Remote ID is also an IP Address.
• If Aggressive is selected as the mode of IPSec negotiation, you can configure an IP Address, a
DNS or an Email in Local ID and Remote ID.
• If you select Main as the mode of IPSec negotiation, you can configure an IP Address only in the
Local ID and Remote ID.