Chapter 10 IPsec VPN : IPsec VPN concepts : Authentication : Additional authentication
  
Additional authentication
To increase security, you can require additional means of authentication from users, such as:
An identifier, called a peer ID or a local ID.
Extended authentication (XAUTH) which imposes an additional user name/password requirement.
A Local ID is an alphanumeric value assigned in the Phase 1 configuration. The Local ID of a peer is called a Peer ID.
In FortiOS 5.2, new authentication methods have been implemented for IKE: ECDSA-256, ECDSA-384, and ECDSA-521.