RFI Multimax+, User Manual

Page: 71 / 139

Multimax_user manual_v.4.0.4 July. 11, 2018 71/139
Confidential
Local ID Type Select from “Default”, “FQDN” and “User FQDN” for IKE negotiation.

Default: Uses an IP address as the ID in IKE negotiation

FQDN: Uses an FQDN type as the ID in IKE negotiation. If this option is
selected, type a name without any at sign (@) for the local security
gateway, e.g., test.robustel.com.

User FQDN: Uses a user FQDN type as the ID in IKE negotiation. If this
option i
s selected, type a name string with a sign “@” for the local
security gateway, e.g., test@robustel.com.
Default
IKE Settings
Item Description Default
Remote ID Type Select from “Default”, “FQDN” and “User FQDN” for IKE negotiation.

Default: Uses an IP address as the ID in IKE negotiation

FQDN: Uses an FQDN type as the ID in IKE negotiation. If this option is
selected, type a name without any at sign (@) for the local security
gateway, e.g., test.robustel.com.

User FQDN: Uses a user FQDN type as the ID in IKE negotiation. If this
option is selected, type a name string with a sign “@” for the local
security gateway, e.g., test@robustel.com.
Default
Private Key Password Enter the private key under the “CA” and “xAuth CA” authentication types. Null
Username Enter the username used for the “xAuth PSK” and “xAuth CA” authentication
types.
Null
Password Enter the password used for the “xAuth PSK” and “xAuth CA” authentication
types.
Null
IKE Lifetime Set the lifetime in IKE negotiation. Before an SA expires, IKE negotiates a new
SA. As soon as the new SA is set up, it takes effect immediately and the old
one will be cleared automatically when it expires. 86400
If click
VPN > IPsec > Tunnel > General Settings , and choose ESP as protocol. The specific parameter
configuration is shown as below.
If choose
AH as protocol, the window of SA Settings is displayed as below.