Configuring Advanced Vpn Parameters; Configuring Ike Sa Parameters - HP 7102dl - ProCurve Secure Router Configuration Manual

N o t e
Using the Web Browser Interface for Advanced Configuration Tasks
a. In the Source Data field, enter the IP address and subnet mask for the
local network you want to include in the VPN.
b. In the Destination Data field, enter the IP address and subnet mask
for the private network for remote users. For example, in Figure 16-
87, the administrator has entered 192.168.100.0 255.255.255.0. This
network includes the range of addresses for remote clients shown
configured in Figure 16-86.
c. Click Add.
11. If you have based this connection on a previous one, you may need to
delete a VPN selector. For example, the policy may permit traffic between
two remote sites, but you only want to use this policy for mobile users.
You can delete a VPN selector by clicking the Delete button to its right.

Configuring Advanced VPN Parameters

If you selected Typical setup in the VPN wizard, you were not able to alter the
IKE SA and IPSec SA security parameters. However, you can tailor them as
needed in the Advanced VPN Policies window.
You should typically use the Advanced VPN Policies window to simply alter
security settings for a VPN or to add or delete networks from the VPN. If you
want to establish a new VPN connection, you can complete all necessary steps
by adding a VPN peer from the VPN Peers window.
Follow these steps:
1. Select VPN Peers under VPN in the left navigation bar.
2. In the third window, Advanced VPN Policies, click the Advanced VPN
Policies button.
You will move to a new window, from which you can configure IKE and IPSec
policies.

Configuring IKE SA Parameters

Follow these steps:
1. The first window, Add/Modify/Delete IKE Policies, offers you several
choices:
a. You can modify an already existing IKE policy. For example, you may
have used the VPN wizard to establish a VPN connection. The wizard
will have already created an IKE policy, which will be listed at the
bottom of the window. Click the Name/ID of the policy.
Setting Up Virtual Private Networks
16-113