CONEL ER75i v2 — настройка IPsec туннеля через веб-браузер: пошаговое руководство [62/106]

Превью страниц Страница 62 / 106

1. CONFIGURATION OVER WEB BROWSER

Continued from previous page

Item Description

Rekey Fuzz Percentage extension of Rekay Margin time

DPD Delay Time after which the IPsec tunnel functionality is tested

DPD Timeout The period during which device waits for a response

Authenticate Mode Using this parameter can be set authentication:

• Pre-shared key – sets the shared key for both sides of the

tunnel

• X.509 Certiﬁcate – allows X.509 authentication in multi-

client mode

Pre-shared Key Shared key for both sides of the tunnel to Pre-shared key authen-

ticate

CA Certiﬁcate Certiﬁcate for X.509 authentication

Remote Certiﬁcate Certiﬁcate for X.509 authentication

Local Certiﬁcate Certiﬁcate for X.509 authentication

Local Private Key Private key for X.509 authentication

Local Passphrase Passphrase for X.509 authentication

Extra Options Use this parameter to deﬁne additional parameters of the IPsec

tunnel, for example secure parameters etc.

Table 40: IPsec tunnel conﬁguration

IPsec supports the following types of identiﬁers (ID) of both tunnel sides (Remote ID and

Local ID items):

• IP address (e.g. 192.168.1.1)

• DN (e.g. C=CZ,O=Conel,OU=TP,CN=A)

• FQDN (e.g. @director.conel.cz) – in front of FQDN must always be @

• User FQDN (e.g. director@conel.cz)

The certiﬁcates and private keys have to be in PEM format. As certiﬁcate it is possible to

use only certiﬁcate which has start and stop tag certiﬁcate.