HP TMS zl Module Security Administrator's Guide

4-79
Configuring a VPN on the HP TMS zl Module
Configure an IPsec Client-to-Site VPN
i. If you have not already done so, configure a group or groups for
the remote users.
Configure the user group in the TMS-Network > Authentication >
Firewall/XAUTH Users window.
ii. Configure usernames and passwords for the remote users in one
of these locations:
– An external RADIUS server—Remember, to add the RADIUS
server in the TMS-Network > Authentication > RADIUS Servers
Configuration window.
– On the module itself (in the TMS-Network > Authentication >
Firewall/XAUTH Users window)
iii. When you later configure firewall access policies, select the
remote users’ groups from the User Group list before you configure
policies that control their traffic.
See Chapter 6: “Configuring the TMS zl Module Firewall” for
information about configuring authentication using the TMS man-
agement capabilities in NIM.
•Select Enable XAUTH Client:
i. For Authentication Type, select Generic or CHAP.
ii. For Username, type a username accepted by the remote gateway’s
authentication server.
iii. For Password, type the password associated with that username.
17. Click Next.