Site-To-Site Configuration - HP 7102dl - ProCurve Secure Router Configuration Manual

Remote ID Type
IP address
domain name
ASN distinguished name (for
use with digital certificates
only)
email address
any
Table 10-13. Remote ID Types
Example (Figure 10-6)
10.1.20.1
siteb.procurve.com
"CN=RouterB, C=US, S=CA,
L=Roseville, O=ProCurve,
OU=TechSupport"
user@procurve.com
—
Router 10.1.10.1
www.sitea.procurve.com
LAN
192.168.1.0/24
Figure 10-6. Remote ID for VPN Peer

Site-to-Site Configuration

You can identify the peer by its:
IP address (gateway's public address)
fully-qualified domain name (FQDN)
abstract syntax notation distinguished name (ASN-DN) (only when using
digital certificates)
email address
Wildcard Command Syntax
10.1.0.0 0.0.255.255 crypto ike remote-id address
<A.B.C.D> <wildcard bits>
*procurve.com crypto ike remote-id fqdn
<domain name>
"CN=*, C=*, S=*, L=*, crypto ike remote-id asn1-dn
O=ProCurve, OU=*" <distinguished name>
*@procurve.com crypto ike remote-id user-fqdn
<email address>
— crypto ike remote-id any
Internet
Virtual Private Networks
Configuring a VPN Using IPSec
Router 10.1.20.1
www.siteb.procurve.com
LAN
192.168.2.0/24
10-33