}
The parameters
Gateway IP/Domain Name (Remote)
,
Subnet IP (Remote)
,
Subnet
Mask (Remote)
,
Bind to (Local)
,
Subnet IP (Local)
,
Subnet Mask (Local)
,
Preshared Key
, and
P2 Encrypt/Auth Algorithms 1
are the same as those in the
Bidirectional
connection type, please refer to the detailed descriptions of them.
The difference is that this connection type requires identity authentication. Specifically,
the identity authentication for the remote IPSec endpoint is required, that is, the
remote IPSec endpoint should provide its identity information to the local Device for
authentication; but the identity authentication for the local Device is optional.
ID Type (Remote):
Specify the type of remote ID. The available options are
Domain Name
,
Email Address
, and
IP Address
. In this connection type, it is a
required parameter. You must select one type and then specify
ID Value
(Remote)
to allow the local Device to authenticate the remote IPSec device.
ID Value (Remote):
Specify the identity of the remote IPSec device. In this
connection type, it is an optional parameter. Please enter an ID value according
to the selected
ID Type (Remote)
.
ID Type (Local):
Specify the type of local ID. The available options are
Domain
Name
,
Email Address
, and
IP Address
. In this connection type, it is an optional
parameter. If you want the local Device to be authenticated, please select one
type and then specify
ID Value (Local)
.
ID Value (Local):
Specify the identity of the local Device. In this connection type,
it is a required parameter. Please enter an ID value according to the selected
ID
Type (Local)
.
2) Advanced Parameters Settings
Click the
Advanced Options
hyperlink to view and configure advanced parameters.
In most cases, you need not configure them. In the
Bidirectional
connection type,
you should choose
Main
mode as the exchange mode for phase 1 IKE negotiation; in
the
Originate-Only
or
Answer-Only
connection type, you should choose
Aggressive
mode.
