HP VPN Firewall Appliances Network Management Configuration Guide

571
2. Configuration procedure
a. Assign an IP address and mask to each interface according to Figure 327. (Details not shown.)
b. Configure a GRE tunnel:
# Create Tunnel 0 on Router A a
nd configure the IP address and mask for the interface.
<RouterA> system-view
[RouterA] interface tunnel 0
[RouterA-Tunnel0] ip address 50.1.1.1 24
# On Router A, specify the tunnel encapsulation mode as GRE over IPv4 and assign the source
and destination addresses to the interface.
[RouterA-Tunnel0] tunnel-protocol gre
[RouterA-Tunnel0] source 20.1.1.1
[RouterA-Tunnel0] destination 30.1.1.2
[RouterA-Tunnel0] quit
# Create Tunnel 0 on the firewall and configure the IP address and mask for the interface.
<Firewall> system-view
[Firewall] interface tunnel 0
[Firewall-Tunnel0] ip address 50.1.1.2 24
# On the firewall, specify the tunnel encapsulation mode as GRE over IPv4 and assign the
source and destination addresses to the interface.
[Firewall-Tunnel0] tunnel-protocol gre
[Firewall-Tunnel0] source 30.1.1.2
[Firewall-Tunnel0] destination 20.1.1.1
[Firewall-Tunnel0] quit
c. Configure OSPF:
# Configure OSPF on Router A.
[RouterA] ospf 1
[RouterA-ospf-1] area 0
[RouterA-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] network 20.1.1.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] network 50.1.1.0 0.0.0.255
[RouterA-ospf-1-area-0.0.0.0] quit
[RouterA-ospf-1] quit
# Configure OSPF on Router B.
<RouterB> system-view
[RouterB] ospf 1
[RouterB-ospf-1] area 0
[RouterB-ospf-1-area-0.0.0.0] network 20.1.1.0 0.0.0.255
[RouterB-ospf-1-area-0.0.0.0] network 30.1.1.0 0.0.0.255
[RouterB-ospf-1-area-0.0.0.0] quit
[RouterB-ospf-1] quit
# Configure OSPF on the firewall.
[Firewall] ospf 1
[Firewall-ospf-1] area 0
[Firewall-ospf-1-area-0.0.0.0] network 30.1.1.0 0.0.0.255
[Firewall-ospf-1-area-0.0.0.0] network 40.1.1.0 0.0.0.255
[Firewall-ospf-1-area-0.0.0.0] network 50.1.1.0 0.0.0.255