Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring the ISAKMP server
• Trace—Logs all errors and informational messages. Also logs debug
and function trace information.
6 In the Available Authentication Methods field, select the authentication
method(s) you want to be made available for VPN associations that use
Extended Authentication. A check mark appears when an authentication
button is selected. See “Extended Authentication for VPN” on page 399 for
a detailed description of Extended Authentication.
Note: You must configure an authentication method before it can be selected.
See “Configuring authentication services” on page 284 for more information.
7 If two or more authentication methods are selected, you should specify a
default method from the Default drop-down list. If a default method is not
selected, the first method selected in the list will be the default method.
8 Click the Save icon in the toolbar to save your changes.
Allowing access to the ISAKMP server
An ISAKMP rule is required in order to allow access to and from the ISAKMP
server. “Creating proxy rules” on page 222 describes how to define a proxy
rule. The ISAKMP proxy rule must contain the following values:
• Service Type = Server
• Service = isakmp
• Source Burb = the Internet burb
• Destination Burb = the Internet burb
• Source address = All Source Addresses (or addresses of remote VPN
peers)
• Destination address = a network object representing the IP address of the
Internet burb, or a netgroup that contains a network object representing the
IP address of the Internet burb
This ISAKMP rule is implicitly bi-directional, meaning it enables ISAKMP traffic
in both directions.
Enabling/disabling the ISAKMP server
Perform the following steps to enable or disable the ISAKMP server.
1 In the Admin Console, select Services Configuration > Servers.
2 Select isakmp from the list of server names.
3 Click Enable or Disable.
4 Click the Save icon in the toolbar.
403