HP TMS zl Module Security Administrator's Guide

4-100
Configuring a VPN on the HP TMS zl Module
Configure an IPsec Client-to-Site VPN
Figure 4-62. Manage IPsec Wizard > Add IPsec Policy (step 4) Window
13. If desired, configure settings in the Advanced Settings (Optional) section.
a. Select the check boxes for the advanced features that you want to
enable:
– Enable IP compression
– Enable extended sequence number
– Enable re-key on sequence number overflow
This setting is enabled by default.
– Enable persistent tunnel
– Enable fragment before IPsec
This setting is enabled by default.
For information and guidelines on these settings, see “Advanced
IPsec Features” on page 4-21.
b. For Anti-Replay Window Size, type a value between 32 and 1024.
This setting determines how far out of order a packet can arrive and
still be accepted. (See “Anti-Replay Window” on page 4-22 for more
information.)