HP MSM7XX

Working with VPNs
Securing controller communications to remote VPN servers
16-8
Note the selections made in the sample Add/Edit security policy page above.
See the online help for option descriptions.
See Keeping user traffic out of the VPN tunnel on page 16-10.
Configure PPTP client for a remote VPN server
Configure the PPTP client for the controller VPN client capability via the Controller >> VPN
> PPTP client menu.
The PPTP client enables the controller to create a secure tunnel to any device that provides a
PPTP server. All traffic sent though this tunnel is protected against eavesdropping by means
of encryption.
Option Value to set Notes
General Enabled
Name user-defined
Phase 1 mode Main mode
Mode Tunnel
Interface Internet port
Encryption
algorithm
Select as desired
Perfect Forward
Secrecy
Leave enabled
Accept any peer Disabled
Peer information User-defined Set according to VPN server needs. In this
example, the VPN server address is 3.1.1.1.
Authentication
method
User-defined Set according to VPN server needs. Either the
X.509 certificates or the Preshared key must
match server configuration.
Security policy >
Only permit
incoming...
Identify the subnet Identify the local subnet for which you wish to
filter traffic, for example, 7.1.1.0. This must
match the value defined in the policy on the
peer (VPN server).
Only permit
outgoing...
Identify the remote
subnet
Identify the remote subnet for which you wish
to filter traffic, for example, 10.0.0.0. This must
match the value defined in the policy on the
peer (VPN server).