F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

414
Ste
p
Remarks
7. Configuring Routing
Required.
To establish private networks across the public network by
using DVPN, you must perform routing configuration for
devices in the private networks. In a DVPN, route-related
operations, such as neighbor discovery, route updating,
routing table establishment, are done over DVPN tunnels.
Routing information is exchanged between Hubs or
between Hubs and Spokes. It is not exchanged between
Spokes.
DVPN clients support routing protocols OSPF and BGP.
When the routing protocol is OSPF, set the network type of
an OSPF interface to broadcast in a full mesh network or
P2MP in a Hub-Spoke network. Make sure that the DR
priority of a Hub is higher than that of a Spoke. HP
recommends you to set the DR priority of a Spoke to 0 to
keep the Spoke from participating in DR/BDR election. For
information about OSPF configuration, see Network
Management Configuration Guide.
When the routing protocol is BGP, configure IBGP
between the Hubs and Spokes and configure the Hubs as
the route reflectors in a full mesh network, or configure
EBGP between the Hubs and Spokes in a Hub-Spoke
network. For information about BGP configuration, see
Network Management Configuration Guide.
After the configuration, you can view the DVPN information on the DVPN server or client.
Table 58 Displaying and maintaining DVPN
Task Remarks
1038H
Displaying VAM client information View information about registered clients on the DVPN server
1039H
Displaying DVPN session information View DVPN tunnel information on a DVPN client
302BConfiguring a VPN domain
1. From the navigation tree, select VPN > DVPN > Server.
The VAM server configuration page appears, as shown in
1040HFigure 310.