tainy hmod-v3-io, tainy hmod-l3-io - Dr. Neuhaus ...

VPN connections
7.2 VPN Roadwarrior Mode
IPsec VPN >
Connections
ONLY TAINY HMOD-V3-IO
ONLY TAINY EMOD-V3-IO
Function The Roadwarrior Mode makes it possible for the TAINY xMOD-V3-IO VPN to
accept a VPN connection initiated by a remote station with an unknown IP
address. The remote station must authenticate itself properly; in this VPN
connection there is no identification of the remote station based on the IP
address or the hostname of the remote station.
Roadwarrior Mode
Edit Settings
Function Set the TAINY xMOD-V3-IO up in accordance with what has been agreed
with the system administrator of the remote station.
Authentication method Select the authentication method in accordance with what you have agreed
with the system administrator of the remote station.
The TAINY xMOD-V3-IO supports three methods:
� X.509 certificate
� CA certificate
� Pre-shared key
X.509 certificate, CA certificate
In the authentication methods X.509 certificate and CA certificate, the keys
used for authentication have first been signed by a Certification Authority
(CA). This method is considered especially secure. A CA can be a service
provider, but also, for example, the system administrator for your project,
provided that he has the necessary software tools. The CA creates a
certificate file (PKCS12) with the file extension *p12 for each of the two
remote stations. This certificate file contains the public and private keys for
the own station, the signed certificate from the CA, and the public key of the
CA. For the authentication method X.509 there is additionally a key file
(*.pem or *.crt) for each of the two remote stations with the public key of the
own station.
X.509 certificate The public keys (files with extension *.pem or *.crt) are
exchanged between the TAINY xMOD-V3-IO and the
remote station's VPN gateway takes place manually, for
example on a CD-ROM or via e-mail. To load the
certificate, proceed as described in Chapter 7.4.
Page 60 of 111 TAINY xMOD