TMS zl Management and Configuration Guide ST.1.1.100226

7-378
Virtual Private Networks
Configure IPSecuritas (Macintosh VPN Client)
Configure IPSecuritas (Macintosh VPN
Client)
This section includes step-by-step instructions for configuring a Macintosh
IPSecuritas client to establish a VPN connection to the TMS zl Module. These
instructions have been tested with the Macintosh OS X Leopard 10.x operating
system and IPSecuritas 3.x.
These instructions show which settings on IPSecuritas are compatible with
the settings on the TMS zl Module. The settings that you select for the client
must match exactly the settings on the TMS zl Module. See Table 7-35 on
page 7-394 for the TMS zl Module settings. For instructions for configuring
these settings, see “Configure an IPsec Client-to-Site VPN” on page 7-27.
Follow these steps to configure an IPsec VPN connection on the Macintosh
IPSecuritas client:
1. Open IPSecuritas.
2. If you plan to use preshared keys for authentication, move directly to step
3 on page 7-384. If you plan to use certificates instead, install them now:
a. In the IPSecuritas menu, click Certificates > Certificate Manager.
Firewall access
policies
User Group None • Permit Self External isakmp Any Any
• Permit External Self isakmp Any Any
• Other access policies that control traffic from the remote
client
Add Policy
If XAUTH is enabled,
User Group <group
configured for the
remote user>
Access policies that control traffic from the remote client Add Policy
Parameter Valid Settings Configuration Window