Configuring An Xauth Host - HP 7102dl - ProCurve Secure Router Configuration Manual

Configuring an Xauth Host

The ProCurve Secure Router can act as an Xauth host and authenticate itself
to a peer that requires Xauth.
Complete the following steps:
1. Create or move to the configuration mode context of the IKE policy for
the peer that requires Xauth.
Syntax: crypto ike policy <policy number>
2. Select the type of authentication.
Syntax: client authentication host xauth-type [generic | otp | radius]
3. Enable the Xauth host by setting the username and password it will send
to the peer.
Syntax: client authentication host username <username> password <password>
Setting the Username and Password for Generic Authentication.
Generic authentication is the default type. Obtain your username and pass-
word from your VPN peer. From the IKE policy configuration mode context,
enter the username and password:
Syntax: client authentication host username <username> password <password>
For example:
ProCurve(config-ike)# client authentication host username VPNPeer password
MyPassword
Setting the Username and Password for RADIUS Authentication.
1. Change the authentication type to RADIUS:
Syntax: client authentication host xauth-type radius
2. Enter the username and password you have obtained from your peer.
For example:
ProCurve(config-crypto-ike)# client authentication host xauth-type radius
ProCurve(config-crypto-ike)# client authentication host username VPNPeer
password MyPassword
Virtual Private Networks
Configuring a VPN Using IPSec
10-53