Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Adding or modifying
a client
identification string
Configuring
Certificate
Management
Chapter 14: Configuring Virtual Private Networks
Configuring Certificate Management
To create or modify a client identifier, follow the steps below.
1 Type the new client identifier in the Client ID field. You can type any of the
possible identifiers:
• Distinguished name
• E-mail address
• Domain name
• IP address
• XAUTH username
Tip: The XAUTH username overrides all other client identification values. If the
user will be using extended authentication, you should only add that user name
for fixed IP mapping.
2 Click Add to add the client ID to the list.
3 To create additional client IDs, repeat step 1 and step 2 for each client ID.
4 Click the Save icon.
If you are using automatic key generation and intend to use certificates for
authentication, you should configure the certificate and/or Certificate Authority
(CA) server information before you set up the VPN. This eliminates the need to
configure certificates and CAs during the VPN process. To configure certificate
or CA information, follow these general steps.
1 Review the section “Selecting a trusted source” on page 419 for details on
certificates and CAs.
2 Decide if you will use a public CA server, your private CA server, or selfsigned
certificates generated by the Sidewinder G2 (which can be used
between two Sidewinder G2s or between a Sidewinder G2 and a VPN
client machine).
3 If you are using a public or private CA server, go to “Configuring and
displaying CA root certificates” on page 420. You may also want to add
remote identities to be used in conjunction with a Certificate Authority
policy. See “Configuring and displaying Remote Identities” on page 422.
4 If you are using self-signed certificates, refer to the section titled
“Configuring and displaying firewall certificates” on page 424.
5 If you are configuring a VPN between the Sidewinder G2 and a machine
running the client version of the Sidewinder G2 VPN solution, and if you are
not using a CA, you must create a remote certificate, export it, then import
the certificate into the VPN client. Refer to the section titled “Exporting
remote or firewall certificates” on page 435.
415