HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 887

N o t e
Using the Web Browser Interface for Advanced Configuration Tasks
1. You should be in the Advanced VPN Policies window. Scroll to the Add/
Modify/Delete IPSec Policies window.
2. You have several choices:
a. You can modify an existing policy. You should select this option if
simply you want to change the security parameters for a VPN conec-
tion. IPSec policies are listed by name and then number at the bottom
of the window. Click the Name/ID of the policy that you want to
modify.
b. You can create an entirely new IPSec policy. Unless you are configur-
ing a VPN on a different WAN interface, this policy should have the
same name as already established policies (for example, the wizard
names policies "VPN"). The Secure Router OS uses this name to apply
an entire group of IPSec policies to an interface. However, you should
assign the new policy a different number from other policies.
Select the name of the policy from the pull-down menu in the Add
New IPSec Policy section. Then enter a number for the new policy in
the Priority field.
c. You can create a new IPSec policy based on a pre-existing policy.
Select the Copy option. Choose the base policy from the pull-down
menu and enter a new number for the priority.
The Secure Router OS applies every policy with the same name to an
interface. You can configure a different peer in each policy with a
different priority number.
3. The IPSec Policy <mapname> Priority <number> window displays.
4. You can modify settings for security parameters in the IPSec Configura-
tion window. Select the setting that you want from the pull-down menu
next to the parameter's name. Parameters include:
• PFS Diffie-Hellman group
• Encryption/hash algorithm—A pull-down menu provides all available
combinations of algorithms. The window includes two pull-down
menus, so you can specify up to two sets of algorithms.
• IPSec SA lifetime
See "IPSec Settings (Custom Setup Only)" on page 14-69 for more infor-
mation on configuring these settings. Table 14-6 displays settings that you
can configure for the IPSec policy.
Setting Up Virtual Private Networks
14-87