HP VPN Firewall Appliances VPN Configuration Guide

107
Figure 75 IKE global configuration page
2. Configure global IKE parameters, as described in Table 5.
3. Click Apply.
Table 5 Configuration items
Item Descri
p
tion
IKE Local Name
Enter a case-sensitive name string for the local security gateway.
If the local device acts as the IKE negotiation initiator and uses the ID type of FQDN or the
user FQDN of the security gateway for IKE negotiation, you must configure this
parameter on the local device. Then, the local device sends its gateway name as
identification to its peer and the peer uses the locally configured remote gateway name
to authenticate the local device. Make sure that the local gateway name configured here
is identical to the remote gateway name configured on its peer.
By default, the device name is used as the local gateway name.
NAT Keepalive
Interval
Set the interval at which the ISAKMP SA sends NAT keepalive packets to its peer.
NAT mappings on a NAT gateway can get aged. If no packet traverses an IPsec tunnel
in a certain period of time, the NAT mapping will be deleted, disabling the tunnel beyond
the NAT gateway from transferring data. To prevent NAT mappings from being aged, an
ISAKMP SA sends to its peer NAT keepalive packets at a certain interval to keep the NAT
session alive.
Configuring an IKE proposal
1. Select VPN > IKE > Proposal from the navigation tree to display existing IKE proposals.
Figure 76 IKE proposal list
2. Click Add to enter the IKE proposal configuration page.