HP VPN Firewall Appliances VPN Configuration Guide

212

Figure 143 IPsec VPN policy configuration wizard: 3/4 (branch node)

7. Perform configuration as described in Table 17.

Table 17 Configuration items

Item Descri

tion

Source IP

Address/Wildcard

Specify the traffic to be protected by giving the source IP address and wildcard,

destination IP address and wildcard, and the protocol type.

IMPORTANT:

Based on these configurations, the wizard creates an advanced ACL that permit

packets matching these criteria and apply this ACL to the IPsec policy. The ACL number

is the smallest, available number in the range 3000 to 3999. If there is no number

available for the ACL, the wizard notifies you that the IPsec VPN policy configuration

fails.

Destination IP

Address/Wildcard

Protocol Type

Encryption Suite

Select the encryption suite for the IPsec proposal. An encryption suite specifies the IP

packet encapsulation mode, security protocol, and authentication and encryption

algorithms to be used. Options include:

• TUNNEL-ESP-SHA1-3DES—Uses the tunnel mode for IP packet encapsulation, ESP

for packet protection, SHA1 for authentication, and 3DES for encryption.

• TUNNEL-ESP-MD5-DES—Uses the tunnel mode for IP packet encapsulation, ESP

for packet protection, MD5 for authentication, and DES for encryption.

• TUNNEL-AH-MD5-ESP-DES—Uses the tunnel mode for IP packet encapsulation,

ESP and AH for packet protection, MD5 for AH authentication, and DES for ESP

encryption.

• TUNNEL-AH-MD5-ESP-3DES—Uses the tunnel mode for IP packet encapsulation,

ESP and AH for packet protection, MD5 for AH authentication, and 3DES for ESP

encryption.