HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 482

Virtual Private Networks
Quick Start
Parameters
ESP authentication algorithm
(optional, unless you select
ESP null)
IPSec SA lifetime type
IPSec SA lifetime in kilobytes
(optional)
IPSec SA lifetime in seconds
(optional)
ACL listname
local VPN network(s)
network in the IKE mode
config pool
hosts in the VPN networks
denied access to the tunnel
(optional)
crypto mapname
crypto map index
number
8-96
Options
• MD5
• SHA-1
• kilobytes
• seconds
2560 to 536,870,912 kilobytes
120 to 86,400 seconds
alphanumeric string
range of host addresses
(<A.B.C.D> <wildcard bits>)
first A.B.C.D
last A.B.C.D
• host address (<A.B.C.D>)
• range of host addresses
(<A.B.C.D> <wildcard bits>)
alphanumeric string
0 to 65,535
1. Install the IPSec VPN module.
2. Enable VPN functions:
ProCurve(config)# ip crypto
3. Configure an IKE mode config pool:
Syntax: crypto ike client configuration pool <poolname>
4. Specify the range of private network addresses in the pool:
Syntax: ip-range <first A.B.C.D> <last A.B.C.D>
5. You can also specify server addresses for clients in the pool:
Syntax: dns-server <A.B.C.D> [<A.B.C.D>]
Syntax: netbios-name-server <A.B.C.D> [<A.B.C.D>]
Obtain Setting From
match peer
match peer
match peer
match peer
—
local network address(es) and
subnet mask(s)
network address(es) and
subnet mask(s)
organizational policy
same name for every entry
establishing a connection on
the same interface
different index number for
every entry establishing a
connection to a different site
Your Setting