HP X Unified Security Platform Series Bedienungsanleitung PDF herunterladen (Seite 224)

Chapter 7 VPN

208 X Family LSM User’s Guide V 2.5.1

STEP 3

To provide enhanced security, check Enable Perfect Forward Secrecy, and then select the

Diffie-Hellman Group to use from the drop-down list.

STEP 4

Configure the Phase 2 Local ID checking options to determine how the X family device nego-

tiates IKE Phase 2 local-id checking. For details, see “Phase 2 Local ID configuration options”

on page 206.

STEP 5

Click Create/Save to save the configuration.

Click Cancel to return to the VPN - IKE Proposals page without saving the changes.

For detailed field descriptions, see “IKE Proposal Phase 1 and Phase 2 Configuration Parameters” on

page 202.

L2TP Configuration

Overview

Layer 2 Tunneling Protocol (L2TP) allows a dial-up user to make a virtual Point-to-Point Protocol

(PPP) connection to an L2TP Server on the VPN. L2TP sends PPP frames through a tunnel between a

user and the L2TP Server.

You can configure the X family device to act as an L2TP Server with support for L2TP over IPSec.

L2TP over IPSec is a combination of protocols commonly used to authenticate a user (L2TP) and

encrypt data (using IPSec). It is much more secure than L2TP protocol alone.

As an L2TP Server, the device can terminate L2TP connections from VPN clients, such as those

included with Windows XP or Windows Vista.

L2TP Status

You can view and manage L2TP connections and configuration from the L2TP Status page (VPN >

L2TP Status).

Note This feature must be supported by both VPN devices.

Note To use the device as an L2TP VPN terminator, you must check Support L2TP

when you are configuring the IPSec default SA. For details, see “

Edit the Default SA for

Client-to-Site VPN Connections using L2TP over IPSec” on page 194 for more information.

1 2 ... 219 220 221 222 223 224 225 226 227 228 229 ... 332 333

Keine Kommentare

HP X Unified Security Platform Series Bedienungsanleitung Seite 224