HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 878

Using the Web Browser Interface for Advanced Configuration Tasks
Setting Up Virtual Private Networks
14-78
The interface adds the new network, but also keeps the first. If you do not
want to include this network, you must delete it by clicking the Delete
button to the right of the entry for the remote network.
Client-to-Site Configuration. To add a mobile client to the VPN, you must
complete these steps:
1. In the Step 1 of 4: VPN Peer Configuration for "<VPN mapname>"
window, enter a name for the connection to the clients.
2. Select Mobile Peer for the Peer Type. The interface adds a new step to the
process, so the window will now be labelled Step 1 of 5.
3. If are basing this connection on a previous connection and you want to
keep the same security settings, or if you want to use the default settings,
you can move to step 6.
4. You can alter the security settings for the IPSec SA in the IPSec Configu-
ration section of the Step 1 of 4: VPN Peer Configuration for "<VPN
mapname>" window. Select settings for the following parameters from
their pull-down menus:
• PFS group
• Encryption/hash algorithm—A pull-down menu provides all available
combinations of algorithms. The window includes two pull-down
menus, so you can specify up to two sets of algorithms.
• IPSec SA lifetime
For more information on these settings, see "IPSec Settings (Custom
Setup Only)" on page 14-69.
5. You can alter the default security settings for the IKE SA in the Step 2 of 5:
Add/Delete IKE attributes for "<VPN mapname>" window. Select set-
tings for the following parameters from their pull-down menus:
• encryption/hash algorithm
• authentication method
• Diffie-Hellman key group
• IKE SA lifetime
Select the desired setting from the pull-down menu for each parameter.
Enter the IKE SA lifetime in the Lifetime field in seconds.
For more information on these settings, see "IKE Settings (Custom Setup
Only)" on page 14-67.