Quick Reference Guide

Model FVL328 ProSafe High-Speed VPN Firewall Reference Manual Revision 2
6-32 Virtual Private Networking
May 2004, 202-10030-02
f.
You will now see the “FVL328” entry in the Active Self Certificates table and the pending
“FVL328” Self Certificate Request is gone, as illustrated below.
Figure 6-20: Self Certificates table
7. Associate the new certificate and the Trusted Root CA certificate on the FVL328.
a. Create a new IKE policy called Scenario_2 with all the same properties of Scenario_1
(see “Scenario 1 IKE Policy” on page 6-24) except now use the RSA Signature instead of
the shared key.
Figure 6-21: IKE policy using RSA Signature
b.
Create a new VPN Auto Policy called scenario2a with all the same properties as
scenario1a except that it uses the IKE policy called Scenario_2.