![](/images/new-backgrounds/1306800/306800105x1.webp)
The source and destination of both policies must be the same. Add a different AutoIKE key tunnel to each policy.
See Adding an encrypt policy.
Adding a remote gateway
Add a remote gateway configuration to define the parameters that the
You can add one remote gateway and then create multiple AutoIKE key tunnels that include the same remote gateway in their configurations. When the
To add a remote gateway:
•Go to VPN > IPSEC > Remote Gateway .
•Select New to add a new remote gateway.
•Configure the remote gateway.
Gateway Name
Remote Gateway
IP Address
User Group
Mode
P1 Proposal
DH Group
Keylife
Authentication
Local ID
Enter a name for the gateway. The name can contain numbers
Select Static IP Address or Dialup User.
If you select Static IP Address, the IP Address field appears. Enter the IP address of the remote IPSec VPN gateway or client that can connect to the
If you select Dialup User, the User Group field appears. For authentication purposes, you can select the group of users that will have access to the remote gateway. For information about dialup VPN authentication, see About dialup VPN authentication.
Select Aggressive or Main (ID Protection) mode. Both modes establish a secure channel. Main mode offers greater security because identifying information is exchanged after encryption is set up. Aggressive mode is less secure because it exchanges identifying information before encryption is set up.
For both Static IP Address and Dialup User remote gateways, the mode at both ends of the gateway must be the same.
Select up to three encryption and authentication algorithm combinations to propose for phase
1.Two are selected by default. To decrease the number of combinations selected, select the minus sign. To increase the number of combinations selected, select the plus sign. See About the P1 proposal.
Select one or more
Specify the keylife for Phase 1. The keylife is the amount of time in seconds before the phase 1 encryption key expires. When the key expires, a new key is generated without interrupting service. P1 proposal keylife can be from 120 to 172,800 seconds.
Enter an authentication key. The key can contain any characters and must be at least 6 characters in length. The
Optionally enter a local ID if you set Remote Gateway to Dialup user and select Aggressive
53 | |
|