Nortel Networks 620 User Manual
Chapter 3
Configuration via Local Pages
E-DOC-CTC-20051017-0169 v0.1
40
IKE Authentication with
Preshared Key
When you select Use Preshared Key Authentication, the following fields have to be
completed:
completed:
Preshared Secret:
A string to be used as a secret password for the VPN connection. This secret
needs to be identically configured at both peers (local and remote peer).
A string to be used as a secret password for the VPN connection. This secret
needs to be identically configured at both peers (local and remote peer).
Confirm Secret:
The Preshared Secret value is not shown in clear text in the SpeedTouch™
Web page. In order to protect from typing errors, you have to type the key
twice, in order to confirm your original entry.
The Preshared Secret value is not shown in clear text in the SpeedTouch™
Web page. In order to protect from typing errors, you have to type the key
twice, in order to confirm your original entry.
Local ID Type and Local ID:
The Local ID identifies the local SpeedTouch™ during the Phase 1 negotiation
with the remote Security Gateway. This identity must match the settings in the
remote Security Gateway in order to successfully set up the IKE Security
Association. The identity types supported in the SpeedTouch™ are listed in
the table below.
The Local ID identifies the local SpeedTouch™ during the Phase 1 negotiation
with the remote Security Gateway. This identity must match the settings in the
remote Security Gateway in order to successfully set up the IKE Security
Association. The identity types supported in the SpeedTouch™ are listed in
the table below.
Remote ID Type and Remote ID:
The Remote ID identifies the remote Security Gateway during the Phase 1
negotiation. This identity must match the settings in the remote Security
Gateway in order to successfully set up the IKE Security Association. The
identity types supported in the SpeedTouch™ are listed in the table below.
The Remote ID identifies the remote Security Gateway during the Phase 1
negotiation. This identity must match the settings in the remote Security
Gateway in order to successfully set up the IKE Security Association. The
identity types supported in the SpeedTouch™ are listed in the table below.
Page layout for
certificate
authentication
When you click Use Certificate Authentication, the IKE Authentication area of the
page is updated in the following way:
page is updated in the following way:
IKE Authentication:
Certificate parameters
When you select Use Certificate Authentication, you have to fill out the
Distinguished Name of the local and remote Certificates.
Distinguished Name of the local and remote Certificates.
Identity type
Keyword
Examples
IP address
addr
10.0.0.1
Fully qualified domain name
fqdn
sales.corporate.net
User fully qualified domain
name
name
userfqdn
Distinguished name
dn
dc=corpor,uid=user
Key identity
keyid
myid
If you encounter problems during the IKE negotiations, use the Debug >
Logging page to verify that the Identity Type and Identity of the two peer
Security Gateways correspond with each other.
Logging page to verify that the Identity Type and Identity of the two peer
Security Gateways correspond with each other.