McAfee SG310, Administration Manual

Page: 278 / 412

278 McAfee UTM Firewall 4.0.4 Administration Guide
VPN menu features
IPSec Advanced Setup wizard
Figure 283 IPSec VPN — Phase 2 Settings page — x.509 authentication
Fill in the fields.
a
Indicate the Local Network and Remote Network values. This examples uses the predefined
Network of Port B for the Local Network, and 172.17.4.0/24 for the Remote Network. Click
Add. The pair appears in the Local and Remote Network list.
b
Leave the Key lifetime field at the default value.
c
Leave the Phase 2 Proposal at the default.
d
Leave Perfect Forward Secrecy enabled.
e
Leave the Diffie-Hellman Group at the default.
8
Click Finish. The tunnel is added to the Tunnel List pane, and the Status column indicates the current
status of the tunnel.
Aggressive keying mode for an IPSec tunnel
Use the aggressive mode for a less restrictive exchange of key mode. The example configuration presented
in this procedure is a connection from a local dynamic IP address to a remote static IP address.
1
From the VPN menu, click IPSec. The IPSec VPN Setup page appears.
2
Click Advanced. The Tunnel Settings page appears ( Figure 284 ).
Figure 284 Tunnel Settings page — Aggressive keying mode
Fill in the fields.