HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 879

C a u t i o n
Using the Web Browser Interface for Advanced Configuration Tasks
Take care when altering default security settings. Security parameters for both
the IKE and the IPSec SA must match those proposed by the peer.
6. Move to the Step 3 of 5: Remote IDs Allowed to Connect to "<VPN
mapname>" window. The router uses the remote ID to determine whether
a peer can connect to the VPN and what policies the router should use
when negotiating a VPN connection with that peer.
For the Remote ID Type, you can select IP Address, IP Subnet, Domain
Name, Email Address, Distinguished Name, or Match Any Remote ID.
The interface labels the field below depending on the ID type that you
select.
If you select IP Address, all VPN clients must use that exact IP address.
(This remote ID type is not typical for a VPN connection to mobile users.)
You can select IP Subnet instead to allow access to an entire range of
addresses; this solution is best for mobile users in a private network, not
for mobile users tunneling through their own Internet connections.
The email address is purely for identifying the client; it does not have to
be valid. You can use the wildcard character (*) to match a range of
addresses. For example, you could enter *@procurve.com to allow
user1@procurve.com, user2@procurve.com, and so forth, remote access
to the VPN.
Setting Up Virtual Private Networks
14-79