Digi IX10, Руководство пользователя

Страница: 269 / 874

Virtual Private Networks (VPN) IPsec
IX10 User Guide 269
where value is one of:
n
secret : Uses a pre-shared key (PSK) to authenticate with the remote peer.
a. Set the pre-shared key:
(config vpn ipsec tunnel ipsec_example)> auth secret key
(config vpn ipsec tunnel ipsec_example)>
n
asymmetric-secrets : Uses asymmetric pre-shared keys to authenticate with the remote
peer.
a. Set the local pre-shared key. This must be the same as the remote key on the
remote host.:
(config vpn ipsec tunnel ipsec_example)> auth local_secret key
(config vpn ipsec tunnel ipsec_example)>
b. Set the remote pre-shared key. This must be the same as the local key on the
remote host.:
(config vpn ipsec tunnel ipsec_example)> auth remote_secret key
(config vpn ipsec tunnel ipsec_example)>
n
rsasig : Uses a private RSA key to authenticate with the remote peer.
a. For the private_key parameter, paste the device's private RSA key in PEM format:
(config vpn ipsec tunnel ipsec_example)> auth private_key key
(config vpn ipsec tunnel ipsec_example)>
b. Set the private key passphrase that is used to decrypt the private key. Leave blank
if the private key is not encrypted.
(config vpn ipsec tunnel ipsec_example)> auth private_key_
passphrase
passphrase
(config vpn ipsec tunnel ipsec_example)>
c. For the peer_public_key parameter, paste the peer's public RSA key in PEM
format:
(config vpn ipsec tunnel ipsec_example)> auth peer_public_key
key
(config vpn ipsec tunnel ipsec_example)>
n
x509 : Uses private key and X.509 certificates to authenticate with the remote peer.
a. For the private_key parameter, paste the device's private RSA key in PEM format:
(config vpn ipsec tunnel ipsec_example)> auth private_key key
(config vpn ipsec tunnel ipsec_example)>
b. Set the private key passphrase that is used to decrypt the private key. Leave blank
if the private key is not encrypted.