HP TMS zl Module Security Administrator's Guide

4-39
Configuring a VPN on the HP TMS zl Module
Configure an IPsec Client-to-Site VPN
Figure 4-18. Deploy IPsec Remote-Access VPN Wizard > Configure Remote
Endpoint Information
13. The Remote Network Address setting depends on whether you will use IKE
mode config or not.
It is generally recommended that you use IKE mode config because this
enables you to group VPN clients in a subnet specific to them. If you plan
to use IKE mode config, specify the same addresses that you will configure
for the IKE mode config pool:
• Manually type an IP address, IP address range, or network address in
CIDR format
• Select a single-entry IP, range, or network address object.
If you will not use IKE mode config, you must match the exact value that
the remote clients send for their local IP address. Some clients always
send their actual IP address. In this case, you must specify this single