HP 7102dl - ProCurve Secure Router Configuration Manual page 1028

Using the Web Browser Interface for Advanced Configuration Tasks
Setting Up Virtual Private Networks
16-114
b. You can create a new IKE policy based on the Secure Router OS
default settings. In the Based on Policy pull-down menu, select
Default, and then click the Add New Policy button.
c. You can also create a new IKE policy based on an already configured
policy. The VPN wizard will import the settings for the configured
policy into the new policy, and you can edit the settings that you want
to change. In the Based on Policy pull-down menu, select the number
of the base policy, and then click the Add New Policy button.
Figure 16-88. Adding or Modifying an IKE Policy
The IKE Policy "<policynumber>" window displays.
2. If you have created a new IKE policy, be sure to configure a different peer
for the policy.
3. In the IKE Configuration for IKE Priority ID <number> window, you
can specify the mode in which the router initiates and responds to IKE.
Main mode is more secure than aggressive. The local router must initiate
IKE in a mode to which the peer responds and vice versa. (For more
information on IKE modes, see Chapter 10: Virtual Private Networks.)
Select the setting you want from the Initiate Mode and Respond Mode
pull-down menus. If you do not know what the different modes entail,
leave the settings at their defaults: Aggressive for the Initiate Mode and
Any for the Respond Mode.