Watchguard Firebox X20E, Руководство пользователя

Страница: 213 / 310

User Guide 201
Manual VPN: Setting Up Manual VPN Tunnels
To create Manual VPN tunnels on your Edge
1 To connect to the System Status page, type
https://
in the browser address bar, and the IP
address of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2
From the navigation bar, select VPN > Manual VPN .
The Manual VPN page appears.
3
Click Add .
The Add Gateway page appears.
4
Type a name for your tunnel. This name is used for identification only.
5
The Credential Method is set to Shared Key and can be changed only if you have imported a
remote VPN gateway certificate. For more information on third-party certificates, see “About
Certificates” on page 150.
The shared key is a passphrase that the devices use to encrypt and decrypt the data on the VPN
tunnel. The two devices must use the same passphrase, or they cannot encrypt and decrypt the
data correctly.
Phase 1 settings
Internet Key Exchange (IKE) is a protocol used with VPN tunnels to manage keys automatically. IKE
negotiates and changes keys. Phase 1 authenticates the two sides and creates a key management
security association to protect tunnel data.
The default settings for Phase 1 are the same for all Firebox X Edge devices. Many users keep the fac-
tory default settings.
Make sure that the Phase 1 configuration is the same on the two devices.