RootCertificates=my_root_cert
GatewayCertificate=my_gateway_cert
Web Interface
First create an ID List:
1.
Go to: Objects > VPN Objects > IKE ID Lists > Add > ID List
2.
Enter a name for the list, for example
my_id_list
3.
Click OK
Then, add an ID list to this ID list:
1.
Go to: Objects > VPN Objects > IKE ID Lists > Add > ID List
2.
Select my_id_list
3.
Enter a name for the ID, for example
JohnDoe
4.
Select Distinguished name in the Type control
5.
Now enter:
•
Common Name: John Doe
•
Organization Name: D-Link
•
Organizational Unit: Support
•
Country: Sweden
•
Email Address: [email protected]
6.
Click OK
Finally, apply the Identification List to the IPsec tunnel:
1.
Go to: Network > Interfaces and VPN > IPsec
2.
Select the IPsec tunnel object of interest
3.
Under the Authentication tab, choose X.509 Certificate
4.
Select the appropriate certificate in the Root Certificate(s) and Gateway Certificate
controls - For a certificate chain, all intermediate certificates must be loaded as root
certificates.
5.
Select my_id_list in the Identification List
6.
Click OK
9.3.9. DiffServ with IPsec
The
Differentiated Services
(diffserv) field in a packet can be used by network equipment to
Chapter 9: VPN
699
Содержание NetDefendOS
Страница 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Страница 32: ...Chapter 1 NetDefendOS Overview 32 ...
Страница 144: ...Chapter 2 Management and Maintenance 144 ...
Страница 220: ... Enable DHCP passthrough Enable L2 passthrough for non IP protocols 4 Click OK Chapter 3 Fundamentals 220 ...
Страница 267: ... SourceNetwork lannet DestinationInterface any DestinationNetwork all nets 4 Click OK Chapter 3 Fundamentals 267 ...
Страница 284: ...Chapter 3 Fundamentals 284 ...
Страница 360: ...The ospf command options are fully described in the separate NetDefendOS CLI Reference Guide Chapter 4 Routing 360 ...
Страница 392: ...Chapter 4 Routing 392 ...
Страница 396: ...Web Interface 1 Go to Network Ethernet If1 2 Select Enable DHCP 3 Click OK Chapter 5 DHCP Services 396 ...
Страница 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Страница 420: ...Chapter 5 DHCP Services 420 ...
Страница 424: ...2 Now enter Name lan_Access Action Expect Interface lan Network lannet 3 Click OK Chapter 6 Security Mechanisms 424 ...
Страница 573: ...Chapter 6 Security Mechanisms 573 ...
Страница 575: ...This section describes and provides examples of configuring NAT and SAT rules Chapter 7 Address Translation 575 ...
Страница 607: ...Chapter 7 Address Translation 607 ...
Страница 666: ...Chapter 8 User Authentication 666 ...
Страница 775: ...Chapter 9 VPN 775 ...
Страница 819: ...Chapter 10 Traffic Management 819 ...
Страница 842: ...Chapter 11 High Availability 842 ...
Страница 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Страница 879: ...Chapter 13 Advanced Settings 879 ...