TMS zl Management and Configuration Guide ST.1.1.100226

7-30
Virtual Private Networks
Configure an IPsec Client-to-Site VPN
Figure 7-11. Example IPsec Client-to-Site VPN
6. For Local Gateway, specify the TMS zl Module IP address that will act as
the VPN gateway (indicated by 1 in the example figure). You have two
options:
• Select IP Address and type an IP address in the box.
The IP address must be an IP address that is already configured on
the TMS zl Module and that the remote endpoints can reach. For
example, if the remote endpoints connect to the module through the
Internet, specify the IP address on the module’s Internet VLAN.
• Select Use VLAN IP Address and select a VLAN from the list (which
includes all TMS VLANs on this module).
Select the VLAN on which the remote endpoints reach the TMS zl
Module. For example, if the remote endpoints connect to the module
through the Internet, specify the VLAN that connects to the Internet.
7. For Local ID, configure the ID that the TMS zl Module sends to authenticate
itself. This ID must match exactly, in both type and value, the remote ID
specified on remote endpoints. For more information about ID types, see
“IKE Phase 1” on page 7-13.
a. For Ty pe , select the ID type: