HP TMS zl Module Security Administrator's Guide

4-217
Configuring a VPN on the HP TMS zl Module
Configuring an IPsec Site-to-Site VPN with IKE
Move to the next task: configuring an IPsec policy.
Create an IPsec Policy for an IPsec Site-to-Site VPN
That Uses IKE
This section explains how to configure an IPsec policy for an IPsec SA that is
established between two gateway devices using IKE. The IPsec policy
includes the settings that are negotiated during IKE phase 2 and also selects
traffic for the VPN connection.
You must configure the IPsec policy on each TMS zl Module individually.
Repeat these steps for each module:
1. In the navigation tree, click the module’s name within the TMS zl folder.
2. In the main configuration window, move to the TMS - VPN > IPsec tab.
3. You can add the IPsec policy in several ways:
• Click the IPsec Policies tab. Right-click the TMS zl Module’s name and
select Add. Move to step 4 on page 4-219.
Figure 4-145. PCM+ > TMS-VPN > IPsec > IPsec Policies Window
• You can open the Manage IPsec wizard either by right-clicking the
TMS zl Module’s name in the navigation tree and selecting the wizard
or by clicking the icon in the toolbar.