Configuring Advanced Vpn Parameters; Configuring Ike Sa Parameters - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

N o t e
Using the Web Browser Interface for Advanced Configuration Tasks
11. If you have based this connection on previous one, you may need to delete
a VPN selector. For example, the policy may permit traffic between two
remote sites, but you only want to use this policy for mobile users. You
can delete a VPN selector by clicking the Delete button to its right.

Configuring Advanced VPN Parameters

If you selected Typical setup in the VPN wizard, you were not able to alter the
IKE SA and IPSec SA security parameters. However, you can tailor them as
needed in the Advanced VPN Policies window.
You should typically use the Advanced VPN Policies window to simply alter
security settings for a VPN or to add or delete networks from the VPN. If you
want to establish a new VPN connection, you can complete all necessary steps
by adding a VPN peer from the VPN Peers window.
Follow these steps:
1. Select VPN Peers under VPN in the left navigation bar.
2. In the third window, Advanced VPN Policies, click the Advanced VPN
Policies button.
You will move to a new window, from which you can configure IKE and IPSec
policies.

Configuring IKE SA Parameters

Follow these steps:
1. Scroll to the Add/Modify/Delete IKE Policies window. You now have
several choices:
a. You can modify an already existing IKE policy. For example, you may
have used the VPN wizard to establish a VPN connection. The wizard
will have already created an IKE policy, which will be listed at the
bottom of the window. Click the Name/ID of the policy.
b. You can create a new IKE policy based on the Secure Router OS
default settings. In the Based on Policy pull-down menu, select
Default, and then click the Add New Policy button.
c. You can also create a new IKE policy based on an already configured
policy. The VPN wizard will import the settings for the configured
policy into the new policy, and you can edit the settings that you want
to change. In the Based on Policy pull-down menu, select the number
of the base policy, and then click the Add New Policy button.
Setting Up Virtual Private Networks
14-83