HP ProCurve Threat Management Solution Implementation Guide 2009-05

C-41
Configure VPNs Using the HP ProCurve Threat Management Services zl Module
Configure a Client-to-Site L2TP over IPsec VPN for Windows XP Clients
Figure C-49. Add L2TP Policy—Step 2 of 2
8. For Proposal, select the IPsec proposal that you just configured. For this example, select
ESPTrans.
9. For SA Lifetime in seconds, leave the default 28800.
10. For SA Lifetime in Kilobytes, leave the default 0.
11. Leave the Enable PFS (Perfect Forward Secrecy for keys) check box clear.
12. Leave the Enable IP Compression check box clear.
13. Click Finish. The L2TP policy is displayed in the VPN > IPsec > L2TP Remote Access window.
Add L2TP Dial-in Users
You must configure one L2TP dial-in user for each remote VPN user. Follow these steps:
1. In the left navigation bar of the Web browser interface, click VPN > IPsec.
2. Click the L2TP Remote Access tab.
Figure C-50. VPN > IPsec > L2TP Remote Access Window
3. Click Add Dial-In User.