TMS zl Management and Configuration Guide ST.1.1.100430

7-93
Virtual Private Networks
Configure an IPsec Site-to-Site VPN with IKE
Note The subject name or one of the subject alternate names must match these
settings:
• The local ID in your IKE policies that use this certificate
• The remote ID in IKE policies on remote tunnel endpoints that verify
this certificate
The name must match in both type and value. For example, if you have
typed TMS.procurve.com for Subject Name in the certificate request, the
local ID on the module and the remote ID on the remote tunnel endpoint
must use these settings:
• Type = Distinguished Name
• Value = /CN=TMS.procurve.com
If you added a subject alternate name, you could specify those settings
instead—for example, IP Address for Type and 10.1.1.1 for Value.
12. Click Apply.
The certificate request is displayed in the VPN > Certificates > IPsec
Certificates window.
Figure 7-69. VPN > Certificates > IPsec Certificates Window (Certificate Request
Added)
13. Click the Edit icon in the Tools column for the certificate request.