HP VPN Firewall Appliances VPN Configuration Guide

366
Figure 273 Network diagram
Configuration prerequisites
Before performing the following configurations, make sure:
• The SSL VPN gateway, the CA, and the hosts used by remote users can reach each other.
• The CA is enabled with the CA service and can issue certificates to the SSL VPN gateway and the
hosts.
• The RADIUS server is properly configured to provide normal authentication function for users. In this
example, you need to configure the shared key as expert, configure the user account and user
group information, and add users to user group user_gr2.
Configuring the SSL VPN service
1. Configure a PKI entity named en:
a. Select VPN > Certificate Management > Entity from the navigation tree.
b. Click Add to add a PKI entity.
c. Enter the PKI entity name en.
d. Enter common name http-server for the entity.
e. Click Apply.