Watchguard Firebox SOHO 6 Wireless, Руководство пользователя

Страница: 136 / 208

114 WatchGuard Firebox SOHO 6 Wireless
4 Type the Name and Shared Secret for the SOHO 6 Wireless at
the remote end of the VPN tunnel.
The shared secret is a passphrase used by two IPSec-compatible
appliances to encrypt and decrypt the data that goes through the VPN
tunnel. The two appliances use the same passphrase. If the appliances do
not have the same passphrase, they can not encrypt and decrypt the data
correctly.
5 Use the default Phase 1 settings or change the settings as
necessary.
To modify Phase 1 settings, complete the following steps:
N
OTE
The Phase 1 settings must be the same on both appliances.
6 Set the negotiation mode for Phase 1. The mode selections are
Main and Aggressive . If the external IP address is dynamic,
select Aggressive Mode . If the external IP address is static, use
either mode.
7 Set the Local ID Type and the Remote ID Type . These must
match the settings used on the remote gateway.
- If you set Main Mode , the Local ID Type and the Remote
ID Type must contain IP addresses.
- If you set Aggressive Mode , the Remote ID Type may be
an IP Address or a domain name. If your external IP
address is static, the
Local ID Type must be an IP address.
If your external IP address is dynamic, the Local ID Type
may be either a domain name or an IP address.
8 In the Local ID and Remote ID fields, set the name of the local
network or the remote network. The default values are
“LocalID” and “RemoteID”. In the
Type field, specify an IP
Address or domain name.
- If you set Main Mode , the Local ID Type and the Remote
ID Type must contain IP addresses.