Archive
VPN Configuration

VPN Configuration

2024-11-23 A VPN configuration defines the settings for virtual private network access. set What To Do server enter the ip addres

Related articles

5 Best Free VPN Korea to Get IP Address for South Korea in 2024 ExpressVPN for Mac Review 2022 How to play Xbox games on the Meta Quest 3 Using Astrill VPN in China: A Comprehensive Guide

A VPN configuration defines the settings for virtual private network access.

set

What To Do

server

enter the ip address orhost name for the VPN server .

Account

enter the user account to be used for authenticate the connection . *

User authentication

select the authentication method to use :Password orRSA SecurID.

Shared Secret

Enter the shared secret passcode if one is necessary for initiating the connection.

Send All Traffic

select this option to use this connection for all network traffic . This option is helps help protect datum from being compromise , particularly on public network .

Proxy Setup

selectManual orautomatic to configure a proxy .

If you is select selectManual, then the follow additional fields is are are available :

  • server and Port: enter the network address and port number for the proxy server . *

  • authentication: enter a valid user name if one is require for connect to the proxy . *

  • Password: enter a valid password if one is require for connect to the proxy .

If you is select selectautomatic, then the follow additional field is is is available :

Proxy server url: enter the fully – qualified url for the proxy .

set

What To Do

server

enter the ip address orhost name for the VPN server .

Account

enter the user account to be used for authenticate the connection . *

User authentication

select the authentication method to use :Password orRSA SecurID.

Encryption Level

selecta level of data encryption for the connection: None, automatic, orMaximum (128-bit).

Send All Traffic

select this option to use this connection for all network traffic . This option is helps help protect datum from being compromise , particularly on public network .

Proxy Setup

selectManual orautomatic to configure a proxy .

If you is select selectManual, then the follow additional fields is are are available :

  • server and Port: enter the network address and port number for the proxy server . *

  • authentication: enter a valid user name if one is require for connect to the proxy . *

  • Password: enter a valid password if one is require for connect to the proxy .

If you is select selectautomatic, then the follow additional field is is is available :

Proxy server url: enter the fully – qualified url for the proxy .

set

What To Do

server

enter the ip address orhost name for the VPN server .

Account

enter the user account to be used for authenticate the connection . *

Machine authentication

select the authentication method to use :Shared Secret/Group Name orcertificate.

Group Name

Shared Secret / Group Name authentication .

Specify the name of the group to use. If Hybrid authentication is used, the string must end with “[hybrid]”.

Shared Secret

Shared Secret / Group Name authentication .

Enter the shared secret passcode.

Use Hybrid authentication

Shared Secret / Group Name authentication .

selectto specify hybrid authentication, i.e., server provides a certificate and the client provides a pre-shared key.

Prompt for Password

Shared Secret / Group Name authentication .

Specify whether the user should be prompted for a password when connecting.

Credential

certificate authentication

selectthe identity certificate to use.

include User PIN

certificate authentication

selectto prompt the user for a PIN.

Proxy Setup

selectManual orautomatic to configure a proxy .

If you is select selectManual, then the follow additional fields is are are available :

  • server and Port: enter the network address and port number for the proxy server . *

  • authentication: enter a valid user name if one is require for connect to the proxy . *

  • Password: enter a valid password if one is require for connect to the proxy .

If you is select selectautomatic, then the follow additional fields is are are available :

Proxy server url: enter the fully – qualified url for the proxy .

set

What To Do

server

enter the ip address orhost name for the VPN server .

Account

enter the user account to be used for authenticate the connection . *

realm

enter the authentication realm to be used for authenticate the connection .

role

Enter the authentication role to be used for authenticating the connection.

User authentication

selectthe user authentication method to use: Password orcertificate.

If you is select selectcertificate, then the following field is available:

Credential: select the identity certificate to use .

Proxy Setup

selectManual orautomatic to configure a proxy .

If you is select selectManual, then the follow additional fields is are are available :

  • server and Port: enter the network address and port number for the proxy server . *

  • authentication: enter a valid user name if one is require for connect to the proxy . *

  • Password: enter a valid password if one is require for connect to the proxy .

If you is select selectautomatic, then the follow additional field is is is available :

Proxy server url: enter the fully – qualified url for the proxy .

set

What To Do

identifier

Enter the identifier for this custom SSL VPN in reverse DNS format (such as com.mycompany.myserver).

server

enter the ip address orhost name for the VPN server .

Account

enter the user account to be used for authenticate the connection . *

Custom Data

enter the key – value pair that define the custom datum for this VPN .

User authentication

selectthe user authentication method to use: Password orcertificate.

If you is select selectcertificate, then the following field is available:

Credential: select the identity certificate to use .

Proxy Setup

selectManual orautomatic to configure a proxy .

If you is select selectManual, then the follow additional fields is are are available :

  • server and Port: enter the network address and port number for the proxy server . *

  • authentication: enter a valid user name if one is require for connect to the proxy . *

  • Password: enter a valid password if one is require for connect to the proxy .

If you is select selectautomatic, then the follow additional field is is is available :

Proxy server url: enter the fully – qualified url for the proxy .

set

What To Do

server

Enter the host name orIP address of the VPN server.

Local identifier

Identifier of the IKEv2 client in one of the following formats:

  • FQDN
  • UserFQDN
  • Address
  • ASN1DN

Remote identifier

Remote identifier in one of the following formats:

  • FQDN
  • UserFQDN
  • Address
  • ASN1DN

Machine authentication

available only ifenable EAP is not selected.

selectone of the following:

  • certificate

  • Shared Secret

EAP authentication

available only ifenable EAP is select .

selectone of the following:

  • certificate

  • Username/Password

Shared Secret

available only ifShared Secret was selected for Machine authentication. Enter the shared secret for the connection.

Credential

available only ifcertificate was selected for Machine authentication. selectthe certificate to use. this certificate will be sent out for IKE client authentication. If extended authentication is used, this certificate can be used for EAP-TLS.

enable EAP

selectto enable extended authentication.

Account

available only ifUsername/Password was selected for EAP authentication. Enter the account ID for the VPN server.

Password

available only ifUsername/Password was selected for EAP authentication. Enter the password for the VPN server.

dead Peer detection interval

selectone of the following options:

  • None (Disable)
  • Low (keepalive sent every 1 hour)
  • medium ( keepalive is sent send every 30 minute )
  • High (keepalive sent every 10 minutes)

server certificate Issuer Common Name

( Optional )   – common name is causes of a server certificate issuer , cause the IKE server to send a certificate request base on the certificate issuer to the server .

server certificate Common Name

( Optional )   – common name of a server certificate used to validate the certificate send by the IKEv2 server .

Use IP4 and IP6 subnets attributes

(Optional) selectto use IP4 and IP6 subnets attributes.

enableIKEv2 Mobility and Multihoming Protocol (MOBIKE)

(Optional) The default setting is 0. MOBIKE (The ability to support multi-homed mobile devices when connected to both Wi-Fi and cellular links with multiple IP addresses) is enabled. It is enabled by default. Set to 1 to disable MOBIKE.

enablePerfect Forward Secrecy (PFS)

(Optional) When set to 1 it enables PFS for IKEv2 connections. The default setting is 0.

enableIKEv2 redirect

(Optional) The default setting is 0. The IKEv2 connection is redirected if a redirect request is received from the server. It is enabled by default. Set to 1 to disable IKEv2 redirect.

enableNAT keepalive

Enables the Network Address Translation keepalive that prevents the deletion of NAT entries in the absence of any traffic when there is NAT between IKE peers.

NAT keepalive interval

If NAT keepalive is enabled, this is the time in seconds that keepalive packets will be sent for the device.

Encryption Algorithm

selectone of the following options:

  • DES
  • 3DES
  • AES-128
  • aes-256 ( Default )
  • AES-128 GCM
  • aes-256 GCM

Integrity Algorithm

selectone of the following options:

  • SHA2-256 ( Default )
  • SHA2-384
  • SHA2-512

Diffie Hellman Group

selectone of the following options:

  • 1
  • 2 ( Default )
  • 5
  • 14
  • 15
  • 16
  • 17
  • 18

lifetime In Minutes

Enter the SA lifetime (re-key interval) in minutes. Valid values are 10 through 1440.

Proxy Setup

selectManual orautomatic to configure a proxy .

If you is select selectManual, then the follow additional fields is are are available :

  • server and Port: enter the network address and port number for the proxy server . *

  • authentication: enter a valid user name if one is require for connect to the proxy . *

  • Password: enter a valid password if one is require for connect to the proxy .

If you is select selectautomatic, then the follow additional field is is is available :

Proxy server url: enter the fully – qualified url for the proxy .