R3166-R3206-HP High-End Firewalls VPN Configuration Guide-6PW101

Item Descri

tion

Pre-Shared Key

Select the authentication method for IKE negotiation and specify the required

argument. Options include:

• Pre-Shared Key—Uses the pre-shared key authentication method.

• PKI Domain—Uses the RSA signature authentication method. Available PKI

domains are those configured by selecting VPN > PKI > Domain from the

navigation tree.

PKI Domain

Enable DPD

Select this check box to enable dead peer detection (DPD).

IMPORTANT:

If you enable DPD and the name of the IPsec VPN is abc, the wizard will create a DPD

named abc_dpd and apply it to peer abc_peer.

5. Click Next to enter the next page, as shown in Figure 46.

Figure 46 IPsec VPN policy configuration wizard: 4/4 (branch node)

6. Click Finish to complete the configuration. The system will jump to the page that you can enter by

selecting VPN > IPSec > IPSec Application from the navigation tree.

Configuring a peer node

1. Select Peer Node from the first page of the IPsec VPN policy configuration wizard and then click

Next to enter the page shown in Figure 47.