HP X Unified Security Platform Series Manual de usuario descargar pdf (Pagina 212)

Chapter 7 VPN

196 X Family LSM User’s Guide V 2.5.1

The same pre-shared key must be configured on the remote device establishing a VPN

tunnel with the local device.

o Additionally, for IKE with PSK (Aggressive Mode only), enter the Peer (remote) ID you

want to use in the appropriate field, either Peer Email Address or Peer Domain Name,

depending on the Peer ID Type specified for the IKE Proposal (VPN > IKE Proposal)

If you specified IP Address as the Peer ID Type in the IKE Proposal page, the address

you entered in the Peer IP Address field in step 3 is used, and no entry is required here.

oFor IKE with X.509 Certificates (Main Mode and Aggressive Mode), enter the Peer ID

you want to use in the appropriate field, either Peer Distinguished Name, Peer Email

Address or Peer Domain Name, depending on the Peer ID Type specified for the IKE

Proposal (VPN > IKE Proposal).

•For Manual Keying:

oFrom the Encryption drop-down list, select the encryption method and enter the key.

For details, see the

“Encryption” on page 192.

oFrom the Authentication drop-down list, select the authentication method and enter the

key. For details, see

“Authentication” on page 192.

oIn the Incoming SPI (hex) and Outgoing SPI (hex) fields respectively, enter unique

hexadecimal values (from 1 to 8 characters) for the incoming and outgoing SPI. For

details, see

“Incoming SPI (hex)” on page 192.

You must use the same key information on the remote device.

STEP 10

For IPSec tunnel connections (site-to-site), configure the Tunnel Setup for the Local Net-

work and Remote Networks:

Note If you have selected aggressive mode and are using email or

domain for the local ID, you must have configured the local email or

domain name on the IPSec Configuration page.

1 2 ... 207 208 209 210 211 212 213 214 215 216 217 ... 332 333

Sin comentarios

HP X Unified Security Platform Series Manual de usuario Pagina 212