HP ProCurve Threat Management Solution Implementation Guide 2009-05

C-30
Configure VPNs Using the HP ProCurve Threat Management Services zl Module
Configure a Client-to-Site L2TP over IPsec VPN for Windows XP Clients
3. Create an object for the local VPN gateway address:
a. For Name, type a name that is meaningful to you. For this example, type LocalGateway.
You can use only letters, numbers, and the underscore character (_) in this field.
b. For Type , select IP.
Figure C-33. Add IP Address Object Window
c. Click Single-entry.
d. In the box below, type the IP address of the TMS VLAN on which the remote clients
reach it the module. For this example, type 10.1.1.2.
e. Click Apply.
4. Create an object for the local endpoints:
a. For Name, type a name that is meaningful to you. For this example, type LocalEndpoints.
b. For Type , select Network (IP/Mask) or IP Range. For this example, select Network (IP/
Mask).
c. Click Single-entry.
d. In the box below, specify the subnet or range of IP addresses for local endpoints that
the remote clients are allowed to access. For this example, type 192.168.4.0/24.
e. Click Apply.
5. Create an object for the virtual addresses that remote clients will be assigned through
users’ dial-in accounts:
a. For Name, type a name that is meaningful to you. For this example, type DialIn.
b. For Type , select Network (IP/Mask) or IP Range. For this example, select Network (IP/
Mask).
c. Click Single-entry.
d. In the box below, specify the subnet or range of IP addresses for remote endpoints
that are allowed to send or receive traffic over the site-to-site VPN. For this example,
type 172.16.80.0/24.
e. Click Apply.
6. Click Close.