TMS zl Management and Configuration Guide ST.1.1.100430

7-64
Virtual Private Networks
Configure an IPsec Client-to-Site VPN
Figure 7-48. Add IPsec Policy Window—Step 3 of 4
17. Configure the IP addresses and other settings assigned to remote end-
points through IKE mode config.
Note It is generally recommended that you use IKE mode config. However, if
your clients do not support this feature, clear the Enable IP Address Pool
for IRAS (Mode Config) check box and move to step 18.
a. The Enable IP Address Pool for IRAS (Mode Config) check box should be
selected.
b. For IRAS IP Address/Mask, type the IP address that the TMS zl Module
will use to route traffic from the remote clients. Include a subnet
mask. For example type, 192.168.8.1/24.
Select a subnet that you can reserve for the remote clients; this subnet
cannot be configured on a TMS VLAN. This address will be the clients’
remote gateway while visiting the local network.