iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
$ mv .csr newreq.pem
$ /usr/lib/ssl/misc/CA.sh -sign
Enter pass phrase for ./demoCA/private/cakey.pem:
Sign the certificate? [y/n]:
1 out of 1 certificate requests certified, commit? [y/n]
$ mv newcert.pem _newcert.pem
$ mv newreq.pem _newreq.pem
8. Load the certificates to both gateways:
a. Browse to the ‘Shortcut’ tab and click the ‘Certificates’ icon.
b. In the ‘iPECS SBG-1000’s Local’ sub-tab, click ‘Upload Certificate’. The ‘Load iPECS
SBG-1000’s Local Certificate’ screen appears.
c. Browse to the location of the certificate, which is ~/cert_create/_newcert.pem, and click ‘Upload’.
Figure 5.128 Load iPECS SBG-1000’s Local Certificate
To authenticate the VPN connection with the created certificates, perform the following:
1. Click the ‘VPN IPSec’ link in the ‘Network Connections’ screen, and then click the ‘IPSec’
sub-tab.
2. In the ‘IPSec Automatic Phase 1’ section, in the ‘Peer Authentication’ drop-down menu,
select “Certificate”. The screen refreshes, providing additional settings.
Figure 5.129 VPN IPSec Properties
118