ZyXEL Communications SBG5500-A, Руководство пользователя

Страница: 171 / 274

Chapter 10 VPN
SBG5500 Series User’s Guide
171
10.5.2 Add/Edit a VPN Connection
Click Add to create a new VPN Connection. You can also double click a VPN Connection or select one
and click Edit to go to the following screen.
Enable Extended
Authentication
When multiple IPsec routers use the same VPN tunnel to connect to a single VPN
tunnel (telecommuters sharing a tunnel for example), use extended authentication
to enforce a user name and password check. This way even though they all know
the VPN tunnel’s security settings, each still has to provide a unique user name and
password.
Select the check box if one of the routers (the SBG or the remote IPsec router)
verifies a user name and password from the other router using the local user
database and/or an external server.
Allowed Auth Method This displays when using IKEv2 . Select the authentication method, which specifies
how the SBG authenticates this information.
Server Mode Select this if the SBG authenticates the user name and password from the remote
IPsec router. You also have to select the AAA server to use for authentication if you
use
IKEv1 .
AAA Method This displays when using IKEv2 . Select the AAA server to use to authenticate the user
name and password from the remote IPsec router.
OK Click OK to save your settings and exit this screen.
Cancel Click Cancel to exit this screen without saving.
Table 70 VPN Gateway: Add/Edit
LABEL DESCRIPTION