19216811.liveB
10 • VPN Pages
61
Field
Description
Remote Endpoint Settings
Address group type
Set the remote VPN access group to one of the following
group types:
Single IP address
— for one computer, enter the IP address
for the specific computer
IP address range
— for a small range of computers, enter the
starting and ending IP addresses for the group of consecutive
IP addresses to have access to the VPN tunnel.
IP Subnet
— for an entire subnet/network, enter the Subnet
and Mask
For IP address range and IP Subnet, enter the starting and
ending IP addresses for the group of consecutive IP addresses
to have access to the VPN tunnel.
The remote VPN endpoint on the other side of the tunnel
should match these settings for its local endpoint settings.
Identity type
Define the remote endpoint identity type to automatically use
the remote endpoint IP address, or as a user-specified IP
address, fully qualified domain name (FQDN), or e-mail
address. This is the identity that the far endpoint uses for
identification of the VPN termination point and handshake.
The remote VPN endpoint on the other side of the tunnel
should match these settings for its local endpoint settings.
Identity
Enter the identity string:
For IP address, enter
x.x.x.x
.
For FQDN, enter
yourdomain.com
For email address identity, enter
The remote VPN endpoint on the other side of the tunnel
should match the settings here for its local endpoint settings.
Network address type
Select the remote endpoint’s WAN address type: IP address or
Fully Qualified Domain Name (FQDN)
Remote Address
Enter either the IP address of the remote endpoint or its
FQDN.
IPsec Settings
Associate one of the two phases of Security Association (SA)
to the VPN tunnel. Phase 1 creates an IKE SA. After Phase 1 is
completed, Phase 2 creates one or more IPSEC SAs, which are
then used to key IPSEC sessions.
Pre-shared key
Enter the “Pre-shared Key” field if one side of the VPN tunnel
is using a unique firewall identifier (or Pre-shared Key.