HP TMS zl Module Security Administrator's Guide

4-273
Configuring a VPN on the HP TMS zl Module
L2TP over IPsec VPNs
Figure 4-189. Manage IPsec Wizard > Add IPsec Proposal Window
4. For Proposal Name, type a descriptive string of 1 to 32 alphanumeric
characters. The string must be unique to this proposal.
Often, it is a good idea to indicate the algorithms that you will select in
the name—for example, ESP3desMD5.
5. For Encapsulation Mode, select Transport Mode.
All traffic sent over the VPN will originate on the TMS zl Module or on the
remote endpoint, so this is the correct setting.
You must match the remaining settings to one of the default proposals sent by
Windows XP clients, which are shown in Table 4-33.
Table 4-33. IPsec Security Settings Proposed by Windows XP Clients
Proposal Protocol Encryption Algorithm Authentication Algorithm
1 ESP 3DES SHA-1
2 ESP 3DES MD5
3 ESP DES SHA-1
4ESP DES MD5