Extreme Networks Altitude 4700 Series, Руководство по продукции

Страница: 236 / 648

Configuring Access Point Security
Altitude 4700 Series Access Point Product Reference Guide
236
3 Configure the IKE Key Settings screen to modify the following:
Operation Mode The Phase I protocols of IKE are based on the ISAKMP
identity-protection and aggressive exchanges. IKE main
mode refers to the identity-protection exchange, and IKE
aggressive mode refers to the aggressive exchange.
• Main —Standard IKE mode for communication and key
exchange.
• Aggressive —Aggressive mode is faster, but less secure
than Main mode. Identities are not encrypted unless
public key encryption is used. The authentication
method cannot be negotiated if the initiator chooses
public key encryption
Local ID Type Select the type of ID to be used for the access point end
of the SA.
• IP —Select IP if the local ID type is the IP address
specified as part of the tunnel.
• FQDN —Use FQDN if the local ID is a fully qualified
domain name (such as extremenetworks.com).
• UFQDN —Select UFQDN if the local ID is a user fully-
qualified email (such as
johndoe@extremenetworks.com).
Local ID Data Specify the FQDN or UFQDN based on the Local ID type
assigned.