Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 3 DVPN Configuration Commands
3Com Corporation
3-16
If the additional information is of forward type, the client cannot establish sessions with
other clients in the DVPN domain. If the additional information is of undistributed type,
the DVPN server does not notify any client in the DVPN domain of the redirecting
packets about the client. (But the DVPN server can still notify the client of redirecting
packets about other clients. So the client may establish sessions with other clients.)
You can execute the dvpn register-type command only on the tunnel interface that is
of client type.
Related command: dvpn interface-type.
The two flags are not set by default.
Example
# Set the DVPN server not to distribute the information about the client to other clients.
[Quidway-tunnel0] dvpn register-type undistributed
3.1.21 dvpn security
Syntax
dvpn security acl acl-number
undo dvpn security acl
View
Tunnel interface view
Parameter
acl-number: Specifies an ACL in the range 3,000 to 3,999. This ACL is used by the
system to decide which data stream needs encryption on the current interface.
Description
Use the dvpn security acl command to configure the ACL used for deciding which
data stream needs IPSec encryption on the tunnel interface.
Use the undo dvpn security acl command to remove the ACL.
You can reference an ACL to decide which packets need IPSec encryption before they
are forwarded in a DVPN domain. Those denied by the ACL are not to be encrypted by
IPSec.