Billion Electric Company BiGuard Series BiGuard VPN Client Configuration - Phase 1 Configuration

BiGuard VPN Client Configuration – Phase 1 Configuration

“Authentication” or “Phase 1” window will concern settings for Authentication Phase or Phase 1. It is also called IKE Negotiation Phase.

Phase 1's purpose is to negotiate IKE policy sets, authenticate the peers, and set up a secure channel between the peers. As part of Phase 1, each end system must identify and authenticate itself to the other.

You need use for the BiGuard VPN Client settings defined in Billion BiGuard series VPN enabled devices VPN configuration.

Name: Label for Authentication phase used only the configuration user interface. This value is never used during IKE negotiation. It is possible to change this name at any time and read it in the tree control. Two Phase 1 can not have the same name (“billion” in our example).

Interface: IP address of the network interface of the computer, through which VPN connection is established. If the IP address may change (when it is received dynamically by an ISP), select "any".

Remote Gateway: IP address or DNS address of the remote router (in our example: gateway.dyndns.com). This field is mandatory.

Pre-shared key: Password or key shared with the remote router (“12345678” in our example).

Certificate (Please see the Appendix A): X509 certificate used by the VPN client (see certificate configuration).

IKE encryption: Encryption algorithm used during Authentication phase (3DES, AES, ...).

IKE authentication: Authentication algorithm used during Authentication phase (MD5, SHA, ...).