HP TMS zl Module Security Administrator's Guide

4-45
Configuring a VPN on the HP TMS zl Module
Configure an IPsec Client-to-Site VPN
Figure 4-21. Deploy IPsec Remote-Access VPN Wizard > Configure IRAS details
(optional)
10. Configure the IP addresses and other settings assigned to remote end-
points through IKE mode config.
Note It is generally recommended that you use IKE mode config. However, if your
clients do not support this feature, clear the Enable IP Address Pool for IRAS
(Mode Config) check box and move to step 19 on page 4-47.
11. Select the Enable IP Address Pool for IRAS (Mode Config) check box.
12. For IRAS IP Address/Mask, type the IP address that the TMS zl Module will
use to route traffic from the remote clients. Include a subnet mask. For
example, type 172.16.100.1/24.
Select a subnet that you can reserve for the remote clients; this subnet
cannot be configured on a TMS VLAN. This address will be the clients’
remote gateway while visiting the local network.
13. For Firewall Zone, select the zone for remote clients after they establish
the VPN connection.