HP 7102dl - ProCurve Secure Router Configuration Manual page 1020

Using the Web Browser Interface for Advanced Configuration Tasks
Setting Up Virtual Private Networks
16-106
You can use the ASN1 DN option when you are using digital certificates
as the IKE authentication method. You must enter the fields exactly as
they are in the certificate. You can use the wildcard character (*) to allow
any value for some of the fields.
6. If you are using preshared keys, enter the key in the Preshared Key field.
7. If you have based the policy on a pre-existing policy and you want to use
the same security settings and allow the same local networks, you can
move to step 11. If you want to accept default settings, but you need to
add a local network, move to step 10.
8. If you want to, you can change IPSec SA settings in the IPSec Configura-
tion section of the Step 1 of 4: VPN Peer Configuration for "<VPN
mapname>" window. Select settings for the following parameters from
their pull-down menus:
• PFS group
• Encryption/hash algorithm—A pull-down menu provides all available
combinations of algorithms. The window includes two pull-down
menus, so you can specify up to two sets of algorithms.
• IPSec SA lifetime
For more information on these settings, see "IPSec Settings (Custom
Setup Only)" on page 16-99.
9. You can alter the default security settings for the IKE SA in the Step 2 of 4:
Add/Delete IKE attributes for "<VPN mapname>" window. Select set-
tings for the following parameters from the pull-down menu for each:
• encryption/hash algorithm
• authentication method
• Diffie-Hellman key group
• IKE SA lifetime
For more information on these settings, see "IKE Settings (Custom Setup
Only)" on page 16-96.
10. You add local networks to the VPN in the Step 3 of 4: Source Networks
Allowed to Connect Using "<VPN mapname>" window. Enter the IP
address and subnet mask.