Nomadix Access Gateway, Руководство пользователя

Страница: 139 / 392

A
CCESS
G
ATEWAY
System Administration 127
 Authenticate via pre-shared key
– Enter the pre-shared key in the
Shared Key
field.
 Authenticate via X.509 Certificate
–

Enter the filename of the private certificate in the
Private Key Filename
field.

Enter the filename of the public certificate in the Certificate Filename field.
Note that the files must exist on flash first.
6.
In the
IKE Channel Security Parameters
section, select the following settings:
 Acceptable Encryption Algorithm
s – Check the
DES
,
3DES,
and/or
AES128CBC
checkboxes (you must check at least one option).

Acceptable Hash Algorithm – Check the MD5 , SHA , and/or AES128 checkboxes
(you must check at least one option).
7. Click Add to add the IPSec tunnel peer to the IPSec Tunnel Peers table on the IPSec
Tunnel Settings screen.
8.
Click the
Back to Main IPSec Tunneling Settings page
link to return to the IPSec Tunnel
Settings screen.
Modifying an Existing IPSec Tunnel Peer
1. Click on the IPSec tunnel peer link that you wish to modify in the IPSec Tunnel Peers
table. The IPSec Tunnel Peer Settings screen opens.
2.
Modify the settings as desired.
3.
Click:
 Modify
to save the changes to the peer.
 Remove
to remove the peer from the
IPSec Tunnel Peers
table.
 Reset
to undo any changes you made to the peer settings and return the peer to its
original settings.
4.
Click the
Back to Main IPSec Tunneling Settings page
link to return to the IPSec Tunnel
Settings screen.
Managing IPSec Security Policies
You can add a new IPSec security policy or modify the settings of an existing IPSec security
policy from the
IPSec Tunnel Settings screen.