Digi TransPort, Руководство пользователя

Страница: 406 / 813

IPsec parameters
Digi TransPort User Guide 406
Set up IPsec tunnels for multiple users
For small numbers of users it is usual to set up an individual eroute for each user. However, to
ease configuration where large numbers of users are required, the * character can be used as a
wildcard to match multiple user IDs. For example, setting the Peer ID parameter to Digi* would
match all remote units having an Our ID parameter starting with Digi , such as Digi01 , Digi02 , etc.
Example
To set up multiple users in this way, first set up the Our ID parameter on the host unit to a
suitable name, such as Host1 . Then set the Peer ID parameter to Remote* for example. In
addition, an entry would be made in the user table with Remote* for the Username and a
suitable Password value, such as mysecret .
Each of the remote units that required access to the host would then have to be configured with
an Our ID parameter of Remote01 , Remote02 , etc., and each would have to have an entry in
their user table for User Host1 along with its password, such as the pre-shared key.
.
Parameter Host Router Remote Router1 Remote Router2 Remote Router1
Peer ID Remote* Host1 Host1 Host1
Our ID Host1 Remote01 Remote02 Remote03
Username Remote* Host1 Host1 Host1
Password mysecret mysecret mysecret mysecret