Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring VPN Security Associations
444
On the Identities sub-tab
The Identities sub-tab is used to define unique identities for the following:
• Firewall Identity is included in the response to the remote client and
confirms to the client that it has established a VPN association with the
correct endpoint.
• Remote Identity is used to match a client identity with a particular security
association; the Sidewinder G2 can then use this information to determine
the password the client should be using. The remote identity is optional for
Fixed IP VPN associations because the Sidewinder G2 can use the IP
address to determine who the client is and thus what password the client
should be using.
1 In the Firewall Identity Type field, select the type of identity to use when
identifying the Sidewinder G2 to the remote client. Valid options are:
• E-mail address
• Fully Qualified Domain Name
• IP Address
Note: E-mail addresses are not recommended, as they are rarely used in the
context of a security gateway.
2 In the Value field, type the actual value used as the firewall identity. The
value must be of the type specified in the Firewall Identity Type field (for
example, if you selected IP Address in the Firewall Identity Type field, you
must type an IP address in the Value field.
3 Select the Gateway IP Address radio button if the Sidewinder G2 should
use the IP address of a Fixed IP client to determine what password the
client should be using.
4 Select the Remote Identities radio button if the Sidewinder G2 should use a
remote identity to determine the ID of the client. Valid identities for this
association should be moved from the Available list to the Trusted list.
5 [Optional] Click Remote Identities to go the Remote Identities window. This
is useful if you want to use an identity that has yet to be created. When you
add the identity and click Close, you will return to the Password
Authentication Identities tab.
6 Complete this tab by doing one of the following:
• If you intend to change the Crypto or Advanced tab settings, go directly
to the next tab without clicking Add or Close.
• If you do not intend to change the Crypto or Advanced tab settings, click
Add and then click Close. Click the Save icon.
• If you do not want to save this Security Association entry, click Close
without clicking Add.