Using the Web Browser Interface for Advanced Configuration Tasks
Setting Up Virtual Private Networks
N o t e
N o t e
14-62
You cannot initiate IKE with a dynamic peer. You can only respond to the peer's
request to open a VPN tunnel. For this reason, at least one of the routers in
the VPN connection must have a static address.
Client-to-Site Configuration. You should select the Mobile Peer circle.
Mobile VPN Peer Settings (Client-to-site VPN only)
In a client-to-site VPN, mobile users may tunnel into the VPN using many
different private connections. Therefore, they may have IP addresses in many
different networks. In order to allow a mobile user to access the VPN, the
ProCurve Secure Router must first assign it an IP address on a local private
network.
Figure 14-46.Configuring an IKE Mode Config Pool for Mobile VPN Peers
Enter the network from which the router should assign remote clients
addresses in the IP Address fields.
The private network for remote users should be different from that for
local users.