R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

125

Figure 88 Adding an IKE peer

3. Configure an IKE peer as described in Table 5.

4. Click Apply.

Table 8 Configuration items

Item Descri

tion

Peer Name Enter a name for the IKE peer.

IKE Negotiation Mode

Select the IKE negotiation mode in phase 1, which can be Main or Aggressive.

The aggressive mode is not available for the FIPS mode.

IMPORTANT:

• If one end of an IPsec tunnel is configured to obtain an IP address

dynamically, the IKE negotiation must use the aggressive mode to establish

SAs with the correct username and password.

• The specified negotiated mode is used when the local peer is the negotiation

initiator. When acting as the responder, the negotiation mode of the initiator

is used.