Extended Authentication (Xauth); Figure 130: Ipsec Policy Configuration Continued (Aut O / Manual Phase 2) - D-Link DWC-1000 User Manual

Wireless Controller
u s in g A u to p olicies wit h IKE are p referred as in s o me IPs ec imp lemen t at io n s t h e SPI
(s ecu rit y p aramet er in d ex) v alu es req u ire co n v ers io n at each en d p o in t .
DW C-1000 s u p p o rt s VPN ro ll-o v er feat u re. Th is mean s t h at p o licies co n fig u red o n
p rimary Op t io n will ro llo v er t o t h e s eco n d ary Op t io n in cas e o f a lin k failu re o n a
p rimary Op t io n . Th is feat ure can b e u s ed o n ly if y o u r Op t io n is co n fig u red in A u t o -
Ro llo v er mo d e.
Figure 130 : IPs e c policy configurat ion continue d (Auto / M anual Phas e
2)

8.2.1 Extended Authentication (XAUTH)

Yo u can als o co n fig ure ext en ded au t hen ticatio n (XA UTH). Rat h er t h an co n fig u re a
u n iq u e VPN p o licy fo r each u s er, y o u can co n fig u re t h e VPN g at eway co n t ro ller t o
au t h en t icat e u s ers fro m a s t o red lis t o f u s er acco u n t s o r wit h an ext ern al
au t h en ticat io n s erv er s u ch as a RA DIUS s erv er. W it h a u s er d atabase, u ser accou n t s
creat ed in t h e co n t ro ller are u s ed t o au t h en t icat e u s ers .
232
User Manual