Granting Remote Users A Private Network Address With Ike Mode Config (Required For Client-To-Site Vpns); Ike Mode Config - HP 7102dl - ProCurve Secure Router Configuration Manual

N o t e
You should apply the crypto map to the logical interface on which traffic will
be transmitted. Typically this is a WAN interface that connects the Internet.
Valid interfaces include:
PPP interfaces
Frame Relay subinterfaces
HDLC interfaces
ATM subinterfaces
Ethernet interfaces
Ethernet subinterfaces (VLAN interfaces)
demand interfaces
An interface must have an IP address before you can apply a crypto map to it.
From the appropriate interface configuration mode context, enter:
Syntax: crypto map <mapname>
For example, if your organization has a PPP connection to the Internet, you
would enter:
ProCurve(config-ppp 1)# crypto map VPN
Granting Remote Users a Private Network Address with IKE
Mode Config (Required for Client-to-Site VPNs)
At times you will need to grant remote users a virtual IP address on your
organization's private network. This option is typically used for client-to-site
VPNs—for example, for telecommuters. These users tunnel into the VPN,
often through their home Internet connection, and unlike users at a remote
site, they are not part of a single private network which the ProCurve Secure
Router can associate with the VPN. IKE mode config assigns these mobile
users a virtual private address for as long as they communicate with the VPN
gateway.

IKE Mode Config

The gateway device uses IKE mode config to send configurations such as an
IP address to a remote user during IKE negotiations. IKE mode config allows
a relatively small pool of mobile users to access the VPN from remote
locations. (IKE mode config is not designed for wide-scale management.)
Virtual Private Networks
Configuring a VPN Using IPSec
10-47