HP 7102dl - ProCurve Secure Router Configuration Manual page 1023

C a u t i o n
Using the Web Browser Interface for Advanced Configuration Tasks
1. In the Step 1 of 4: VPN Peer Configuration for "<VPN mapname>"
window, enter a name for the connection to the clients.
2. Select Mobile Peer for the Peer Type. The interface adds a new step to the
process, so the window will now be labelled Step 1 of 5.
3. If you are basing this connection on a previous connection and you want
to keep the same security settings, or if you want to use the default
settings, continue with step 6.
4. You can alter the security settings for the IPSec SA in the IPSec Configu-
ration section of the Step 1 of 4: VPN Peer Configuration for "<VPN
mapname>" window. Select settings for the following parameters from
their pull-down menus:
• PFS group
• Encryption/hash algorithm—A pull-down menu provides all available
combinations of algorithms. The window includes two pull-down
menus, so you can specify up to two sets of algorithms.
• IPSec SA lifetime
For more information on these settings, see "IPSec Settings (Custom
Setup Only)" on page 16-99.
5. You can alter the default security settings for the IKE SA in the Step 2 of 5:
Add/Delete IKE attributes for "<VPN mapname>" window. Select set-
tings for the following parameters from their pull-down menus:
• encryption/hash algorithm
• authentication method
• Diffie-Hellman key group
• IKE SA lifetime
Select the desired setting from the pull-down menu for each parameter.
Enter the IKE SA lifetime in the Lifetime field in seconds.
For more information on these settings, see "IKE Settings (Custom Setup
Only)" on page 16-96.
Take care when altering default security settings. Security parameters for both
the IKE and the IPSec SA must match those proposed by the peer.
6. Move to the Step 3 of 5: Remote IDs Allowed to Connect to "<VPN
mapname>" window. The router uses the remote ID to determine whether
a peer can connect to the VPN and what policies the router should use
when negotiating a VPN connection with that peer.
Setting Up Virtual Private Networks
16-109