Adding Remote Ids - HP 7102dl - ProCurve Secure Router Configuration Manual

Using the Web Browser Interface for Advanced Configuration Tasks
Setting Up Virtual Private Networks
16-120
3. If the router will use its local database to authenticate the remote VPN
peers, then you should check this list in the Add/Modify/Delete Users
window above.
4. If IKE will refer to a RADIUS server for VPN peers' passwords, you must
configure the router to communicate with this server. See "Configuring
Authentication Using a RADIUS Server" on page 14-36 of the Basic
Management and Configuration Guide.
5. Click Apply.
6. Select VPN Peers under VPN in the navigation bar.
7. Scroll to the Create VPN Peers section. In the Modify/View/Delete Peer
section, click the name of the peer that should require Xauth. The win-
dows for the steps to configure this peer display.
8. Move to the IKE Configuration section of the Step 1 window.
Figure 16-92. Enabling Xauth
9. Choose the Xauth method from Xauth Enabled pull-down menu:
a. To use the router's username and password database, select Local
Userlist.
b. To use a RADIUS server database, select Radius Server.

Adding Remote IDs

The remote ID list acts as a username database for the VPN. The ID type can
be an IP address or network, domain name, email address, or ASN distin-
guished name. If you are using preshared keys for authentication, you can
associate a preshared key with the remote ID, much as you would a password
with a username.
You should add an entry for each peer to which the router will make a VPN
connection as you configure the connection. However, you can also add an
entry in the VPN Peers window. You can also delete misconfigured entries.