pki4ipse-0----Page:13
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
|
IKEv1 Checking Options Fill in IKE ID payload /w something in Cert SubjectAltName and check that the two match Just present Cert, and let receiving peer’s local policy determine what they extract and use as ID Fill in ID w/ something to match IKE SPD entry on receiving peer, then use some SubjectAltName field (as defined by local policy) to do ACL lookup and IPsec SA setup |