HP VPN Firewall Appliances VPN Configuration Guide

438
d. Select RADIUS as the server type for the primary authentication, authorization, and accounting
methods, and select Enable from the Accounting Optional list. Click Apply to finish the ISP
domain configuration and return to the VPN domain configuration page.
e. Enter the pre-shared key 123, enter 123 to confirm the key, enter the Hub 1 private IP 10.0.1.1,
and the Hub 2 private IP 10.0.1.2, and then click Apply.
Configuring the secondary VAM server
See "Configuring the primary VAM server."
Configuring Hub 1
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure tunnel interface Tunnel1 for VPN domain vpn1:
a. From the navigation tree, select VPN > DVPN > Client, and then click Add.
b. Select the tunnel encapsulation mode UDP. Enter tunnel interface number 1. Enter the IP
address/mask 10.0.1.1/24. Select security zone Management for the tunnel interface. Select
the tunnel source interface GigabitEthernet0/1. Enter the VPN domain name vpn1. Enter the
VAM server address 192.168.1.22. Enter the secondary VAM server address 192.168.1.33.
Enter the VAM client username dvpn1hub1. Enter the VAM client password dvpn1hub1. Enter
the password dvpn1hub1 for confirmation. Enter the VAM client pre-shared key 123. Enter the
key 123 for confirmation.
c. Select Enable IPsec.
d. Select the IPsec authentication method Pre-Shared Key and then enter abcde in the Key and
Confirm Key fields.
e. Select IP Address as both the remote ID type and the local ID type.
f. Click Apply.