HP TMS zl Module Security Administrator's Guide

4-55
Configuring a VPN on the HP TMS zl Module
Configure an IPsec Client-to-Site VPN
Figure 4-29. Deploy IPsec Remote-Access VPN Wizard > Configure Remote VPN
Endpoint Address
14. The Remote Network Address setting depends on whether you will use IKE
mode config or not.
If you will use IKE mode config, specify the same addresses that you will
configure for the IKE mode config pool:
• Manually type an IP address, IP address range, or network address in
CIDR format
• Select a single-entry IP, range, or network address object.
If you will not use IKE mode config, you must match the exact value that
the remote clients send for their local IP address. Some clients always
send their actual IP address. In this case, you must specify this single
address and create a separate IPsec policy for each remote client. Other
clients (such as the Mac IPSecuritas) can send an entire subnet. Do one
of the following to specify addresses:
• Manually type an IP address, IP address range, or network address in
CIDR format
• Select a single-entry IP, range, or network address object.
•Select Any to permit any IP address.