HP ThinPro 7.1 - Administrator Guide
IPSec rules
Use this tab to add, edit, and delete IPSec rules. An IPSec rule should be the same for each system that uses
IPSec to communicate.
When conguring an IPSec rule, use the General tab to set the rule’s information, addresses, and
authentication method. The Source Address is the IP address of the thin client, and the Destination Address is
the IP address of the system that the thin client is going to communicate with.
NOTE: Only the PSK and Certicate authentication types are supported. Kerberos authentication is not
supported.
Use the Tunnel tab to congure settings for tunnel mode.
Use the Phase I and Phase II tabs to congure advanced security settings. The settings should be the same
for all peer systems that communicate with each other.
NOTE: An IPSec rule can also be used to communicate with a computer running Windows.
Conguring VPN settings
HP ThinPro supports two types of VPN:
● Cisco
● PPTP
Enable the Auto Start option to start the VPN automatically.
Note the following about creating a VPN using Cisco:
● The Gateway is the gateway’s IP address or hostname.
● The Group name and Group password are the IPSec ID and IPSec password.
● The Domain setting is optional.
● The User name and User password are the user credentials that have rights to create a VPN connection
on the server side.
● The Security Type should be set the same as it is on the server side.
● The NAT Traversal option should be set according to your VPN environment.
● The IKE DH Group option sets the Diie-Hellman group to use for VPN.
● The PFS Type option sets the Diie-Hellman group to use for Perfect Forward Secrecy.
Note the following about creating a VPN using PPTP:
● The Gateway is the gateway’s IP address or hostname.
● The NT Domain setting is optional.
● The User name and User password are the user credentials that have rights to create a VPN connection
on the server side.
DHCP options
To open the DHCP Option Manager:
▲ Select System and then select DHCP Options in Control Panel.
The DHCP Option Manager displays details of the DHCP options that are requested by the thin client.
System 49