TMS zl Management and Configuration Guide ST.1.1.100430

7-35
Virtual Private Networks
Configure an IPsec Client-to-Site VPN
d. For SA Lifetime in Seconds, type the number of seconds that the IKE
SA is kept open.
Valid values are between 300 seconds and 86400 seconds (1 day).
Remember that this setting applies to IKE SA, which is a temporary
tunnel used only to establish the IPsec SA.
12. Click Next.
13. If you want, configure XAUTH, which is an optional additional layer of
security. Otherwise, leave Disable XAUTH selected and move to step 14.
You can configure the TMS zl Module to act either as a client (authenticate
itself) or as a server (authenticate the remote clients). However, config-
uring the module as an XAUTH server is typical:
• Select TMS acts as XAUTH Server.
Figure 7-13. Add IKE Policy Window—Step 3 of 3
i. For Authentication Type, select Generic or CHAP.
To complete the configuration, you must follow these steps as well: