Contents

NetworkVPNIKEV2Authentication_ExtendedAuthObject

Specifies details about extended authentication (EAP).

Declaration

object NetworkVPNIKEV2Authentication_ExtendedAuthObject

Properties

NameTypeDescription
CredentialsAssetReferencestring

The identifier of an asset declaration that contains the credentials (user name and password) to authenticate with the VPN server. Required when Enabled is set to true. Implies the use of EAP-MSCHAPv2.

Enabledboolean

If true, enables EAP-only authentication.

ServerCertificateCommonNamestring

The common name of the server certificate. The system uses this name to validate the certificate sent by the IKE server. If not set, the system uses the remote identifier to validate the certificate.

ServerCertificateIssuerCommonNamestring

Common Name of the server certificate issuer. If set, this field causes IKE to send a certificate request based on this certificate issuer to the server. This key is required if the IdentityCertificateType key is included and the ExtendedAuth.Enabled key is true.

TLSMaximumVersionstring

The maximum TLS version to use with EAP-TLS authentication.

TLSMinimumVersionstring

The minimum TLS version to use with EAP-TLS authentication.